CORS integration about start HOT 2 OPEN

Cross Origin requests headers are absolutely important, when you're building an API. However, I don't think that it's useful to set it to * for all requests by default. You may easily introduce unnecessary security issues by doing that. It's more useful to have those headers added for each endpoint independently, when needed. Additionally, it's important to allow users to have more control over what headers are exposed and what verbs are allowed.

from start.

Ok. I think so. I've tested for my project.
At first, I've tried with the plugin approach. But it takes more time.
Thus, I've experimented with Start framework easily.

I agreed with you that it is important to give users to have more control over CORS.
Thus, I have to more investment on CORS with Plug-in approch.

Thanks a lot.

Benjamin Jung ( [email protected] )

from start.