This repository was archived by the owner on Apr 1, 2026. It is now read-only.
v1.3.0
Added the cors.allowHeaders config. By default, all Access-Control-Request-Headers are allowed. If cors.allowHeaders is set, all headers in Access-Control-Request-Headers must be in cors.allowHeaders or the CORS request will be rejected.