- Add CORSOrigins config field (UPAAS_CORS_ORIGINS env var) - Default to same-origin only (no CORS headers when unconfigured) - When configured, allow specified origins with AllowCredentials: true - Add tests for CORS middleware behavior |
||
|---|---|---|
| .. | ||
| cors_test.go | ||
| middleware.go | ||
| ratelimit_test.go | ||
| realip_test.go | ||