A highly configurable, middleware compatible implementation of CORS.
Last release 10 years ago
no release in 18 months
Ships unpredictably
gaps range from 3 weeks to 2.4 years
This project publishes no release notes
the list below is its commits, not an announcement
Nothing withdrawn
no release was ever pulled
15 years old
11 releases · first in 2011
Release timeline
11 releases since 2011Releases
- 2.0.116 Aug 2016
Release notes
This project publishes no release notes. Between
2.0.0and2.0.1there were 10 commits, 7 of them substantive:- Add repostatus badge.
- Update Node version to test against.
- Enable usage of container-based infrastructure.
- Move badges to the top.
- added chrome workaround for Access-Control-Request-Headers with empty string
- Add link to Chromium bug tracker
- Correct 2.0 version number
- 2.0.020 Mar 2014
Release notes
This project publishes no release notes. Between
1.2.0and2.0.0there were 29 commits, 25 of them substantive:- Add error catching for dynamic origin checking.
- Fix two typos in README.
- Remove obsolete Issues section in README.
- To clarify, it's for Node.js.
- Do people these days even know what xhr.send is?
- Add some notes about nginx.
- Remove x-ception.
- No italics in code block.
- Remove bogus nginx note: proxies are not affected.
- Remove reference to getResponseHeader.
- Replace Referer header in example with X-Requested-With.
- Add example headers in addition to the simple headers.
- Remove reference to proxy that doesn't exist anymore.
- Improve Connect example.
- Remove dependencies of examples in favor of a dedicated package.json.
- Fix path of connect example.
- Add Express example.
- Optimize package.json.
- Add instructions on how to add methods and headers.
- End preflight requests by default.
…and 5 more.
- 1.2.019 Nov 2012
Release notes
This project publishes no release notes. Between
1.1.2and1.2.0there were 8 commits, 7 of them substantive:- Assume NodeJS environment for JSLint.
- Added support for passing a function as origins
- Merge @Nomon's pull request.
- Some quick cleanup, optimizations and simplifications
- Merge @Nomon's pull request.
- Remove redundant case-sensitive matching, requestHeader is already lowercase.
- Add documentation for dynamic origin checking.
- 1.1.226 Oct 2012
Release notes
This project publishes no release notes. Between
1.1.1and1.1.2there were 4 commits, 2 of them substantive:- Case insensitive matching of request headers. This was hitting us with Safari (it sends i.e. "access-control-request-headers: Accept", not "accept")
- Add test to cover case-insensitive matching of Access-Control-Request-Headers.
- 1.1.17 Aug 2012
Release notes
This project publishes no release notes. Between
1.1.0and1.1.1there were 5 commits, 4 of them substantive:- Remove proxy example.
- Remove dependency on optimist from connect example.
- Update connect.
- Do not include example and test directories in npm package.
- 1.1.07 Aug 2012
Release notes
This project publishes no release notes. Between
1.0.2and1.1.0there were 12 commits, 11 of them substantive:- Remove Last-Event-ID from list of simple request headers.
- Do not support multiple values in the Origin header anymore.
- Update comments.
- Add link to supported working draft.
- Fix indentation.
- Remove unnecessary semicolon.
- Remove unnecessary linebreak.
- Enable strict mode.
- ++ is too confusing. Sure.
- Remove obsolete TODO comment.
- Update mocha.
- 1.0.226 Jun 2012
Release notes
This project publishes no release notes. Between
1.0.1and1.0.2there were 5 commits, 4 of them substantive:- Fix typo in package.json.
- Add more documentation.
- Support Node 0.8.x.
- Update recommended Mocha version.
- 1.0.19 Apr 2012
Release notes
This project publishes no release notes. Between
1.0.0and1.0.1there were 12 commits, 11 of them substantive:- Fix bad import in proxy example.
- Do not use regular expressions for case-insensitive header matching.
- Add issues section in README.
- Add more information on configuration elements.
- Add Corser to Travis CI.
- Add build status to README.
- Add Node 0.7.x as an engine.
- Add node_modules to .gitignore.
- Remove node_modules from repository.
- Update mocha.
- Include MIT license.
- 1.0.017 Feb 2012
Release notes
This project publishes no release notes. Between
0.2.0and1.0.0there were 30 commits, 29 of them substantive:- - Make Corser compliant with W3C specification.
- - Loose coupling between Corser and http to enable https.
- Use "npm test" instead of a shell script.
- No more global modules.
- Add ft modeline.
- Add "main" field.
- Loosen version requirement on jasmine-node.
- Use uniform access principle.
- Make it middleware-compatible.
- Fix misinterpretation of request and response headers.
- Make HTTP request and response headers configurable.
- Do not add auth information by default.
- Respect status code of response.
- Add fallback to HTTP if protocol is unsupported.
- Match given request headers instead of simple ones.
- Set Access-Control-Allow-Origin in preflight request if credentials are not supported.
- Add Origin header to the list of request headers.
- Add Origin header to test results.
- Create request listeners outside of the main request listener.
- Switch from jasmine-node to mocha.
…and 9 more.
- 0.2.020 Dec 2011
Nothing published for this version
- 0.1.028 Nov 2011
Nothing published for this version