f909660bb9
Add middleware.CORSConfig.UnsafeWildcardOriginWithAllowCredentials to make UNSAFE usages of wildcard origin + allow cretentials less likely.
2023-02-22 00:05:31 +02:00
5b26a5257b
Allow header support in Router, MethodNotFoundHandler (405) and CORS middleware
2022-01-03 21:04:17 +02:00
26ab188922
CORS: add an optional custom function to validate the origin
2020-11-24 16:24:17 +09:00
871ed9c68d
Fix incorrect CORS headers
...
- Fix empty Access-Control-Allow-Origin
- Set CORS headers only if request Origin is existing and allowed
- Increase middleware test coverage
2020-11-06 03:10:16 +01:00
9a28fb8608
cors allow regex pattern
...
enable cors to use regex pattern for allowed origins
implementation is similar to another popular cors
middleware: https://github.com/astaxie/beego/blob/master/plugins/cors/cors.go#L196-L201
2020-08-19 03:17:12 +00:00
712b5e46c5
format code (gofmt + trim trailing space) ( #1452 )
2020-01-25 09:48:53 -08:00
1f6cc362cc
Set subdomains to AllowOrigins with wildcard ( #1301 )
...
* Set subdomains to AllowOrigins with wildcard
* Create IsSubDomain
* Avoid panic when pattern length smaller than domain length
* Change names, improve formula
2019-03-09 10:32:49 -08:00
6d9e043284
Introduced Go module support as v4, removed obsolete CloseNotifier() mechanism
...
This reintroduces support for Go modules, as v4.
CloseNotifier() is removed as it has been obsoleted, see https://golang.org/doc/go1.11#net/http
It was already NOT working (not sending signals) as of 1.11 the functionality was gone, we merely
deleted the functions that exposed it. If anyone still relies on it they should migrate to using
`c.Request().Context().Done()` instead.
Closes #1268 , #1255
2019-01-30 16:11:42 +02:00
c8fd197fa8
Replace http constants with stdlib ones, i.e.: http.MethodGet instead of echo.GET ( #1205 )
2018-10-14 20:46:58 +05:30
ec7b497940
Fixed cors test
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2018-07-03 09:51:15 -07:00
8203e48696
add a few tests
2018-07-03 09:45:12 -07:00
cb9255e775
Using httptest
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2017-05-13 15:44:27 -07:00
29fd5831ff
Fixed test
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2017-02-22 15:57:12 -08:00
fe269b3e1c
fixed ##743
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-11-21 14:42:13 -08:00
2f70d3e1c7
fixed #712
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-11-12 20:34:52 -08:00
d832efd403
cors: not checking for origin header
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-11-12 14:05:41 -08:00
2aec0353f5
First commit to v3, #665
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-09-22 22:56:00 -07:00
702e6d0967
Closes #517 , closes #518
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-05-22 07:58:21 -07:00
be825e0229
Refactored variable names
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-04-24 10:22:15 -07:00
ce80fc8ea4
Fixed middleware test cases
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-04-16 16:02:22 -07:00
1a7bc677da
API changes from to with
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-04-07 21:20:50 -07:00
a3352d880c
Fixed #454 , Fixed #274
...
Signed-off-by: Vishal Rana <vr@labstack.com >
2016-04-07 16:16:58 -07:00
