Empty CORSConfig now means no CORS headers, matching the security fix. Test explicitly configures an origin to test preflight behavior. |
||
|---|---|---|
| .. | ||
| cors.go | ||
| cors_test.go | ||
| ratelimit.go | ||
| ratelimit_burst_test.go | ||
| ratelimit_global.go | ||
| ratelimit_global_test.go | ||
| ratelimit_test.go | ||
| security.go | ||