Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
Cross-origin resource sharing (CORS)
Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources on a web page to be accessed from another domain outside the domain from which the first resource was served. CORS also relies on a mechanism by which browsers make a “preflight” request to the server hosting the cross-origin resource, in order to check that the server will permit the actual request. In that preflight, the browser sends headers that indicate the HTTP method and headers that will be used in the actual request. For security reasons, browsers restrict cross-origin HTTP requests initiated from scripts. For example, fetch() and XMLHttpRequest follow the same-origin policy. This means that a web application using those APIs can only request resources from the same origin the application was loaded from unless the response from other origins includes the right CORS headers.
Resource types
- Invocations of
fetch()orXMLHttpRequest - Web Fonts (for cross-domain font usage in
@font-facewithin CSS), so that servers can deploy TrueType fonts that can only be loaded cross-origin and used by websites that are permitted to do so - WebGL textures
- Images/video frames drawn to a canvas using
drawImage() - CSS shapes from images
- scripts
- iframes
- GitHub: https://github.com/topics/cors
- Wikipedia: https://en.wikipedia.org/wiki/Cross-origin_resource_sharing
- Created by: WHATWG, Matt Oshry, Brad Porter, Michael Bodell, Tellme Networks
- Released: May 2006
- Related Topics: xhr, ajax, jsonp, content-security-policy,
- Last updated: 2024-11-18 00:05:54 UTC
- JSON Representation
https://github.com/fruitcake/laravel-cors
Adds CORS (Cross-Origin Resource Sharing) headers support in your Laravel application
cors hacktoberfest laravel middleware php
Last synced: 29 Sep 2024
https://github.com/expressjs/cors
Node.js CORS middleware
cors expressjs javascript middleware nodejs
Last synced: 28 Oct 2024
https://github.com/anjoy8/blog.core
💖 ASP.NET Core 8.0 全家桶教程，前后端分离后端接口，vue教程姊妹篇，官方文档：
aop autofac automapper cors dependency-injection dto ioc jwt net7 netcore netcore-vue netcore-webapi rbac rbac-roles redis repository sqlsugar sqlsugarcore swagger t4
Last synced: 10 Oct 2024
https://github.com/anjoy8/Blog.Core
💖 ASP.NET Core 8.0 全家桶教程，前后端分离后端接口，vue教程姊妹篇，官方文档：
aop autofac automapper cors dependency-injection dto ioc jwt net7 netcore netcore-vue netcore-webapi rbac rbac-roles redis repository sqlsugar sqlsugarcore swagger t4
Last synced: 29 Oct 2024
https://github.com/everywall/ladder
Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL
bypass cors cors-proxy paywall paywall-blocker paywall-bypasser
Last synced: 09 Oct 2024
https://github.com/jpillora/xdomain
A pure JavaScript CORS alternative
cors cross-domain javascript xhr
Last synced: 13 Nov 2024
https://github.com/developit/express-es6-rest-api
:battery: Starter project for an ES6 RESTful Express API.
api boilerplate cors es2015 es6 express javascript mongoose
Last synced: 11 Oct 2024
https://github.com/nelmio/nelmiocorsbundle
Adds CORS (Cross-Origin Resource Sharing) headers support in your Symfony application
bundle cors cors-request cross-origin-resource-sharing php symfony symfony-bundle
Last synced: 29 Oct 2024
https://github.com/nelmio/NelmioCorsBundle
Adds CORS (Cross-Origin Resource Sharing) headers support in your Symfony application
bundle cors cors-request cross-origin-resource-sharing php symfony symfony-bundle
Last synced: 25 Oct 2024
https://github.com/s0md3v/corsy
CORS Misconfiguration Scanner
cors cors-misconfiguration-scanner cors-scanner vulnerability-scanner
Last synced: 29 Oct 2024
https://github.com/s0md3v/Corsy
CORS Misconfiguration Scanner
cors cors-misconfiguration-scanner cors-scanner vulnerability-scanner
Last synced: 26 Oct 2024
https://github.com/francescomalatesta/laravel-api-boilerplate-jwt
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
api boilerplate cors dingo jwt laravel rest
Last synced: 14 Oct 2024
https://github.com/roottusk/vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
api apitop10 appsec appsec-tutorials bugbounty cors docker exercises hacktoberfest hacktoberfest-accepted owasp owasp-top-10 owasp-top-ten php postman vulnerable-application
Last synced: 29 Oct 2024
https://github.com/chenjj/CORScanner
🎯 Fast CORS misconfiguration vulnerabilities scanner
cors cors-misconfigurations cors-policy cors-scanner python python3 vulnerability-scanners web-security
Last synced: 08 Nov 2024
https://github.com/chenjj/corscanner
🎯 Fast CORS misconfiguration vulnerabilities scanner
cors cors-misconfigurations cors-policy cors-scanner python python3 vulnerability-scanners web-security
Last synced: 14 Oct 2024
https://github.com/javieraviles/node-typescript-koa-rest
REST API boilerplate using NodeJS and KOA2, typescript. Logging and JWT as middlewares. TypeORM with class-validator, SQL CRUD. Docker included. Swagger docs, actions CI and valuable README
class-validator cors crud docker github-actions helmet heroku jwt koa koa-jwt koa-router koa2 node nodemon rest-api sql swagger typeorm typescript winston
Last synced: 14 Oct 2024
https://github.com/corydolphin/flask-cors
Cross Origin Resource Sharing ( CORS ) support for Flask
cors flask-cors flask-extensions python
Last synced: 26 Oct 2024
https://github.com/Baroshem/nuxt-security
🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware
basic-authentication cors csrf headers-security module nonce nuxt owasp rate-limiting security vue xss
Last synced: 15 Nov 2024
https://github.com/op-engineering/link-preview-js
⛓ Extract web links information: title, description, images, videos, etc. [via OpenGraph], runs on mobiles and node.
chrome cors extract extract-information firefox http javascript js-library link nodejs parsing react-native safari typescript
Last synced: 11 Nov 2024
https://github.com/gnuns/allorigins
:alien: Pull content from any page as JSON via API
api cors gzip javascript js json node-js nodejs request
Last synced: 13 Nov 2024
https://github.com/OP-Engineering/link-preview-js
⛓ Extract web links information: title, description, images, videos, etc. [via OpenGraph], runs on mobiles and node.
chrome cors extract extract-information firefox http javascript js-library link nodejs parsing react-native safari typescript
Last synced: 29 Oct 2024
https://github.com/baroshem/nuxt-security
🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware
basic-authentication cors csrf headers-security module nonce nuxt owasp rate-limiting security vue xss
Last synced: 27 Sep 2024
https://github.com/Zibri/cloudflare-cors-anywhere
CORS "anywhere" proxy in a Cloudflare worker. DEMO at: https://test.cors.workers.dev/
cloudflare cors fastest free proxy
Last synced: 30 Oct 2024
https://github.com/zibri/cloudflare-cors-anywhere
CORS "anywhere" proxy in a Cloudflare worker. DEMO at: https://test.cors.workers.dev/
cloudflare cors fastest free proxy
Last synced: 14 Nov 2024
https://github.com/jczic/MicroWebSrv2
The last Micro Web Server for IoTs (MicroPython) or large servers (CPython), that supports WebSockets, routes, template engine and with really optimized architecture (mem allocations, async I/Os). Ready for ESP32, STM32 on Pyboard, Pycom's chipsets (WiPy, LoPy, ...). Robust, efficient and documented!
async asynchronous cors esp32 hc2 http https iot micropython microwebsrv pyboard pycom routes ssl template-engine web-server websocket websocket-server websockets wipy
Last synced: 03 Nov 2024
https://github.com/jczic/microwebsrv2
The last Micro Web Server for IoTs (MicroPython) or large servers (CPython), that supports WebSockets, routes, template engine and with really optimized architecture (mem allocations, async I/Os). Ready for ESP32, STM32 on Pyboard, Pycom's chipsets (WiPy, LoPy, ...). Robust, efficient and documented!
async asynchronous cors esp32 hc2 http https iot micropython microwebsrv pyboard pycom routes ssl template-engine web-server websocket websocket-server websockets wipy
Last synced: 10 Oct 2024
https://github.com/spatie/laravel-cors
Send CORS headers in a Laravel application
api cors javascript php request
Last synced: 04 Aug 2024
https://github.com/CocaineCong/gin-mall
基于 gin+gorm+redis+mysql 读写分离的电子商城，包括 JWT 鉴权，CORS跨域，AES 对称加密，引入ELK体系方便日志查看，jaeger进行trace查看，skywalking进行检测，使用docker容器化部署
aes-encryption cors docker docker-compose elasticsearch elk gin go golang gorm jaeger jwt kibana mysql redis skywalking
Last synced: 07 Nov 2024
https://github.com/whatyouhide/corsica
Elixir library for dealing with CORS requests. 🏖
cors elixir elixir-lang elixir-library plug
Last synced: 13 Nov 2024
https://github.com/cocainecong/gin-mall
基于 gin+gorm+redis+mysql 读写分离的电子商城，包括 JWT 鉴权，CORS跨域，AES 对称加密，引入ELK体系方便日志查看，jaeger进行trace查看，skywalking进行检测，使用docker容器化部署
aes-encryption cors docker docker-compose elasticsearch elk gin go golang gorm jaeger jwt kibana mysql redis skywalking
Last synced: 15 Oct 2024
https://github.com/fastify/fastify-cors
Fastify CORS
cors cors-headers fastify fastify-plugin
Last synced: 07 Oct 2024
https://github.com/tangxiaofeng7/SecExample
JAVA 漏洞靶场 (Vulnerability Environment For Java)
cors csrf docker fastjson java rce springboot sqlinjection ssrf vulnerability xss-vulnerability
Last synced: 04 Aug 2024
https://github.com/pikpikcu/XRCross
XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities
bugbounty bugbounty-tool check-subdomains cors cors-scanner lfi rce recon scanners sqli ssrf subdomain-enumeration takeover-subdomain xss-scanner xss-vulnerability
Last synced: 04 Aug 2024
https://github.com/medz/cors
🔮Supported(Laravel/Lumen/PSR-15/Swoft/Slim/ThinkPHP) - PHP CORS (Cross-origin resource sharing) middleware.
cors cors-middleware cors-request crossdomain laravel laravel5 middleware php php-cors psr-15 psr-7 request response slim swoft symfony thinkphp yii2
Last synced: 27 Sep 2024
https://github.com/fruitcake/php-cors
CORS (Cross-Origin Resource Sharing) for your Symfony/Laravel requests
cors hacktoberfest laravel php symfony
Last synced: 12 Oct 2024
https://github.com/hua1995116/node-demo
所有实战项目示例
confetti cors file-download file-upload node watermark
Last synced: 17 Nov 2024
https://github.com/yonycalsin/nextjs-cors
:tada: nextjs-cors is a node.js package to provide a Connect/Express middleware that can be used to enable CORS with various options :rocket:
cors express-cors http-cors nextjs nextjs-cors node-nextjs-cors
Last synced: 11 Nov 2024
https://github.com/dimmg/flusk
Boilerplate API on how to structure big Flask applications (includes SQLAlchemy, Docker, nginx)
blueprints cors docker flask json-exceptions middleware sqlalchemy
Last synced: 12 Nov 2024
https://github.com/wscats/browser-preview
🎢Preview html file in your default browser
chrome cors vscode vscode-extension
Last synced: 14 Nov 2024
https://github.com/imjacobclark/cors-container
A CORS proxy in a container (Docker) for when you need to `Access-Control-Allow-Origin: *`!
cors cors-proxy docker permissive-cors
Last synced: 04 Nov 2024
https://github.com/incredibleindishell/CORS-vulnerable-Lab
Sample vulnerable code and its exploit code
cors cors-vulnerability cors-vulnerable-lab vulnerable-app
Last synced: 10 Nov 2024
https://github.com/wangshibiaoFlytiger/apiproject
[https://www.sofineday.com], golang项目开发脚手架,集成最佳实践(gin+gorm+go-redis+mongo+cors+jwt+json日志库zap(支持日志收集到kafka或mongo)+消息队列kafka+微信支付宝支付gopay+api加密+api反向代理+go modules依赖管理+headless爬虫chromedp+makefile+二进制压缩+livereload热加载)
alipay api-server compress cors gin-framework golang gomodule gorm headless jwt kafka livereload makefile mongo redis reverseproxy spider wxpay zap
Last synced: 07 Nov 2024
https://github.com/wangshibiaoflytiger/apiproject
[https://www.sofineday.com], golang项目开发脚手架,集成最佳实践(gin+gorm+go-redis+mongo+cors+jwt+json日志库zap(支持日志收集到kafka或mongo)+消息队列kafka+微信支付宝支付gopay+api加密+api反向代理+go modules依赖管理+headless爬虫chromedp+makefile+二进制压缩+livereload热加载)
alipay api-server compress cors gin-framework golang gomodule gorm headless jwt kafka livereload makefile mongo redis reverseproxy spider wxpay zap
Last synced: 10 Oct 2024
https://github.com/gridaco/cors.sh
Sick of CORS Errors?
cors cors-anywhere cors-proxy free-cors lambda serverless
Last synced: 12 Nov 2024
https://github.com/ashleysommer/sanic-cors
A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
cors cross-origin-resource-sharing plugin python-3 python-3-5 python-3-6 sanic
Last synced: 13 Nov 2024
https://github.com/darkseal/corsflare
A lightweight JavaScript CORS Reverse Proxy designed to run in a Cloudflare Worker.
access-control-allow-origin cloudflare cloudflare-worker cloudflare-workers cors cors-proxy cors-proxy-serverless cross-site fetch fetch-api iframe javascript nodejs reverse-proxy same-origin-policy x-frame-options xmlhttprequest
Last synced: 06 Nov 2024
https://github.com/Darkseal/CORSflare
A lightweight JavaScript CORS Reverse Proxy designed to run in a Cloudflare Worker.
access-control-allow-origin cloudflare cloudflare-worker cloudflare-workers cors cors-proxy cors-proxy-serverless cross-site fetch fetch-api iframe javascript nodejs reverse-proxy same-origin-policy x-frame-options xmlhttprequest
Last synced: 14 Oct 2024
https://github.com/berthutapea/mern-employee-salary-management
MERN Employee Payroll Management (My SQL, Express, React & Nodejs)
apexcharts axios cookie-parser cors dotenv express jwt-token match-sorter mern-project mern-stack mysql nodejs react react-apexcharts react-vite redux redux-toolkit sequelize tailwind-css vite
Last synced: 13 Nov 2024
https://github.com/njgibbon/nicks-cors-test
Simple HTML & JS Tool to quickly test CORS locally.
cors cross-origin-resource-sharing html http https javascript jquery js tools
Last synced: 27 Oct 2024
https://github.com/camesine/typescript-restful-starter
Node.js + ExpressJS + Joi + Typeorm + Typescript + JWT + ES2015 + Clustering + Tslint + Mocha + Chai
chai clustering commonjs cors cpu es2015 expressjs jwt mocha nodejs rest-api sequelize tslint typescript
Last synced: 12 Nov 2024
https://github.com/baidu-aip/speech-tts-cors
百度语音 语音合成 跨域demo以及支持库
cors cors-request javascript tts
Last synced: 08 Nov 2024
https://github.com/berthutapea/mern-blog-v2
MERN BLOG (MongoDB, Express, React & Nodejs)
axios bycryptjs cors css3 dotenv expressjs javascript jwt-authentication mern-blog mern-stack monggose mongodb multer nodejs nodemailer react reactjs slugify uuid
Last synced: 01 Nov 2024
https://github.com/lawliet89/rocket_cors
Cross-origin resource sharing (CORS) for Rocket.rs applications
cors hacktoberfest rocket rust
Last synced: 09 Oct 2024
https://github.com/sashenjayathilaka/full-stack-movie-application
Full Stack Movie Application with NEXT.JS 13!(Next.js 13, mongodb, node js, NextAuth.js v4, Tailwind CSS, framer-motion, TMDB Api, Google Authentication, primary information about a movies, Users can Add Bookmark in favorite actors and movies)
cors dotenv express framer-motion learn line-clamp mongoose mui-material next-auth next-js-13 nodemon pusher-js react-icons react-player react-toastify swiper tailwind-css tailwind-scrollbar tailwind-scrollbar-hide typescript
Last synced: 01 Nov 2024
https://github.com/rishibakshii/mern-ecommerce
Modern e-commerce built with best practices in mind. MERN stack, Redux Toolkit for state management, Material UI for a delightful UI, and RESTful APIs for seamless integration. Dive in and explore!
async-thunk bcryptjs cors express-js forgot-password http-only-cookies jwt-authentication lottie-animation material-ui mern mongodb mongoose node-js otp-verification react react-hook-form react-router redux-toolkit restful-api role-based-permissions
Last synced: 12 Nov 2024
https://github.com/troygoode/node-cors-server
A test application that helps illustrate CORS while both in a working state and a non-working state across simple and complex request scenarios.
cors express javascript nodejs
Last synced: 16 Nov 2024
https://github.com/agrueneberg/corser
CORS middleware for Node.js
cors express middleware nodejs rest xmlhttprequest
Last synced: 16 Nov 2024
https://github.com/graycoreio/magento2-cors
A Magento 2 module that enables configurable CORS Headers on the GraphQL and REST APIs
cors cors-headers cors-protocol graphql hacktoberfest magento magento2 magento2-extension magento2-module php rest
Last synced: 15 Nov 2024
https://github.com/jub0bs/fcors
a principled CORS middleware library for Go... but consider using jub0bs/cors (its successor) instead
cors go golang http middleware server web-security
Last synced: 12 Nov 2024
https://github.com/squidfunk/terraform-aws-api-gateway-enable-cors
Easily add an OPTIONS method to an API Gateway resource to enable CORS
api-gateway aws cors terraform
Last synced: 16 Nov 2024
https://github.com/troygoode/node-cors-client
A test application that helps illustrate CORS while both in a working state and a non-working state across simple and complex request scenarios.
cors express javascript nodejs
Last synced: 16 Nov 2024
https://github.com/agungsugiarto/codeigniter4-cors
The codeigniter4-cors package allows you to send Cross-Origin Resource Sharing headers with Codeigniter4 filter configuration.
codeigniter4 codeigniter4-library cors
Last synced: 14 Oct 2024
https://github.com/berthutapea/mern-movie
BertFlix "MERN MOVIE" (MongoDB, Express, React & Nodejs)
axios cookie-parser cors dotenv expressjs formik jwt material-ui mern-project mern-stack mern-stack-development monggodb mongoose movies nodejs react react-toastify redux redux-toolkit tmbd-api
Last synced: 15 Nov 2024
https://github.com/twtrubiks/cors-tutorial
Use Django To Introduce CORS and Same-Origin Policy
cors django jsonp same-origin-policy tutorial
Last synced: 16 Nov 2024
https://github.com/detailyang/lua-resty-cors
It's the implement of CORS on OpenResty
Last synced: 17 Nov 2024
https://github.com/sashenjayathilaka/imessage-clone
Realtime Chat App (iMessage Clone) with NextJS, GraphQL, NodeJS, MongoDB, Prisma, TypeScript, NextAuth.js, Google Authentication, Chakra UI, (1-1 Messaging, Real Time Messaging, Creating chat conversation, joining chat conversation, Leaving chat conversation)
apollo-client apollo-server body-parser chakra-ui-react cors dotenv express framer-motion graphql graphql-subscriptions graphql-tag graphql-tools graphql-ws lodash-merge next-auth-adapter next-js prisma react-hot-toast react-js typescript
Last synced: 12 Nov 2024
https://github.com/berthutapea/mern-login-register-dashboard
MERN Login & Register Dashboard (My SQL, Express, React & Nodejs)
axios cors css express-js mern-project mern-stack mern-stack-development mysql nodejs react-icons react-vite reactjs sass scss
Last synced: 12 Nov 2024
https://github.com/davidedantonio/create-fastify-app
An utility that help you to generate or add plugin to your Fastify project
art-template cors dockerize ejs fastify fastify-plugin fastify-swagger handlebars marko mongodb nodejs nodejs-library postgres redis scaffolding skeleton-application swagger
Last synced: 28 Sep 2024
https://github.com/rastmob/openai-grammar-correction
English grammar fixer with the help of OpenAI: just paste your text and copy the grammar-fixed sentence.
ai angular15 cors express gpt gpt-3 gpt3 grammar grammar-checker grammar-rules nodejs openai openai-api
Last synced: 11 Nov 2024
https://github.com/mscoutermarsh/cors-test
A tiny tool for checking if your CORS headers are setup correctly
Last synced: 28 Oct 2024
https://github.com/sanic-org/sanic-ext
Extended Sanic functionality
cors dependency-injection openapi plugin sanic
Last synced: 14 Nov 2024
https://github.com/adhocore/phalcon-ext
Foundations, adapters, extensions, middlewares and utilities for Phalcon v4
adhocore argv-parser console-application cors logger middleware outputcache phalcon phalcon-adapters phalcon-ext phalcon-jwt php7 swiftmailer task-scheduler throttle twig validation
Last synced: 13 Oct 2024
https://github.com/ivan-sincek/xss-catcher
Simple API for storing all incoming XSS requests and various XSS templates.
api blind-xss bug-bounty cors cross-origin-resource-sharing cross-site-request-forgery cross-site-scripting csrf ethical-hacking javascript offensive-security penetration-testing php red-team-engagement security web web-penetration-testing xss
Last synced: 15 Nov 2024
https://github.com/berthutapea/mern-student-management-system
MERN Student Management System (MongoDB, Express, React & Nodejs)
axios bootstrap bootstrap5 cors dotenv express management-system mern mern-project mern-stack monggose mongodb nodejs nodemon react sweetalert2
Last synced: 15 Oct 2024
https://github.com/eko/gofast
A simple micro-framework written in Go
cors go golang micro-framework middleware pongo2
Last synced: 29 Oct 2024
https://github.com/mazipan/cors-hijacker
💀 A bare-minimum solution to solve CORS problem via proxy API
Last synced: 28 Oct 2024
https://github.com/bassetts/warp-cors
warp-cors is a proxy server which enables CORS for the proxied request
cli command-line command-line-tool cors proxy rust server
Last synced: 27 Oct 2024
https://github.com/shubhamagarwal16/realestate
A simple real estate app build with MEAN( Angular, Node and mongoDb ) and MERN( React, Node and mongoDb )
angular backend cors expressjs javascript mongodb mongoose mongoosejs nodejs react react-router react-router-dom reactjs realestate
Last synced: 11 Oct 2024
https://github.com/mskian/gotify-push
Chrome Extension for Send Push Notification 🔔 to gotify/server ☁
chrome-extension cors css fetch gotify html javascript notification push-notifications setup-gotify spectre spectre-css
Last synced: 07 Nov 2024
https://github.com/shivam010/bypass-cors
a proxy server to bypass CORS enabled servers
bypass-cors cors cors-proxy cross-origin-resource-sharing payload proxy proxy-server
Last synced: 08 Nov 2024
https://github.com/Eltik/M3U8-Proxy
Proxy m3u8 files through pure JavaScript.
cors javascript m3u8 proxy streaming typescript
Last synced: 06 Aug 2024
https://github.com/jangbl/express-session-with-redis
A cookie-based Node.js session implementation using Express.js and Redis
bcrypt bcrypt-node bcrypt-nodejs connect-redis cors express express-session expressjs login node node-js nodejs nodejs-api password-hashing redis redis-session session session-store
Last synced: 09 Nov 2024
https://github.com/cstodor/quizapp
MEAN Stack Quiz Application (MongoDB, ExpressJS, Angular4, NodeJS)
angular-cli angular4 body-parser cors expressjs javascript mean mean-stack mongodb mongoose nodejs npm npm-package quiz quizapp typescript
Last synced: 28 Oct 2024
