Tags: zf-fr/zfr-cors
Tags
zfr/zfr-cors 1.5.0 - You may now configure rules per-route within zend-mvc route configuration. When detected, these will override any rules that were general to the application. See the ["Configuring the Module" section of the README](README.md#configuring-the-module) for full details.
zfr/zfr-cors 1.4.1 - ZfrCors now properly disallows `Access-Control-Allow-Origin: *` when the credentials flag is true. [#35] - The `CorsRequestListener` now no longer raises an exception when triggered during `EVENT_FINISH` if the `Origin` header is invalid, and instead just returns early. That condition is already found during pre-flight, which allows ignoring it when returning the response. [#47]
PreviousNext