A Rack middleware that adds the simple request CORS Access-Control-Allow-Origin header to your application, even if the app raised an exception.
Require Corsair in your application's Gemfile:
gem "corsair"
In order for Corsair to do its thing it needs to be at the top of the middleware stack. For Rails, this will work nicely in your application.rb:
config.middleware.insert_before 0, "Rack::Corsair"
By default, Corsair will add Access-Control-Allow-Origin: * to all your response headers. You can currently control which domain gets added instead of *, and which resources get the header added. You pass those options in a block, like this:
config.middleware.insert_before 0, "Rack::Corsair" do |corsair|
corsair.allow_origin "*"
corsair.allow_resource :things
end
Licensed under the MIT license. See the separate MIT-LICENSE file.
FAQs
Unknown package
We found that corsair demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.
Security News
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.