koa-cors - npm Package Compare versions

Comparing version 0.0.10 to 0.0.11

index.js

@@ -11,3 +11,7 @@ /**
   var defaults = {
-    origin: '*',
+    origin: function(req) {
+      // http://www.w3.org/TR/cors/#supports-credentials
+      // #3 "The string "*" cannot be used for a resource that supports credentials."
+      return req.header.origin || '*';
+    },
     methods: 'GET,HEAD,PUT,POST,DELETE'
@@ -38,6 +42,4 @@ };
       return;
-    } else if (options.origin === true) {
-      options.origin = this.header.origin || '*';
-    } else if (!options.origin) {
-      options.origin = '*';
+    } else if (!options.origin || options.origin === true) {
+      options.origin = defaults.origin;
     }
@@ -44,0 +46,0 @@ this.set('Access-Control-Allow-Origin', options.origin);

package.json

 {
   "name": "koa-cors",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "CORS middleware for Koa",
@@ -5,0 +5,0 @@ "main": "index.js",

No alert changes

Improved metrics

Total package byte prevSize

7364

increased by2.04%

Lines of code

135

increased by1.5%

No dependency changes