Loading

Search Explore Sign upCreate an account Sign In

gorillagorilla/handlershandlers

Public

Pull mirror status: ok

Code Issues 0 Releases 10 Actions

Release v1.3.0 · gorilla/handlers | Trylle

v1.3.09066371Stable

CORS Security Fix

Ghost released 9y ago

Fixes a security issue where Access-Control-Allow-Origin would reflect the Origin header in the request, which has different (and worse) security vs. returning an explicit "*". Thanks to @ejcx for reporting and fixing.

CHANGELOG

9066371 [bugfix] Don't return the origin header when configured to * (#116)

Assets

2

Source code (tar.gz)
Source code (zip)