Skip to content

Releases: corydolphin/flask-cors

Release 2.0.1

08 May 12:41
Compare
Choose a tag to compare

Fixes Issue #124 where only the first of multiple headers with the same name would be passed through.

Release 2.0.0

24 Mar 04:08
Compare
Choose a tag to compare

BREAKING CHANGES

  1. New defaults allow all origins, all headers.
  2. Removed always_send option.
  3. Removed 'headers' option as a backwards-compatible alias for 'allowed_headers' to reduce confusion.

Release 2.0.0rc1 (beta)

15 Mar 23:31
Compare
Choose a tag to compare
Pre-release

Would love to get some feedback to make sure there are no unexpected regressions. This should be backwards compatible for most people.

Update default options and parameters in a backwards incompatible way.

By default, all headers are now allowed, and only requests with an
Origin header have CORS headers returned. If an Origin header is not
present, no CORS headers are returned.

Removed the following options: always_send, headers.

Extension and decorator are now in separate modules sharing a core module.
Test have been moved into the respective tests.extension and tests.decorator
modules. More work to decompose these tests is needed.

Release Version 1.10.3

13 Feb 01:38
Compare
Choose a tag to compare

Release Version 1.10.3

  • Adds logging to Flask-Cors so it is easy to see what is going on and why
  • Adds support for compiled regexes as origins

Big thanks to @michalbachowski and @digitizdat!

Release Version 1.10.2

18 Dec 03:45
Compare
Choose a tag to compare

This release fixes the behavior of Access-Control-Allow-Headers and Access-Control-Expose-Headers, which was previously swapped since 1.9.0.

To further fix the confusion, the headers parameter was renamed to more explicitly be allow_headers.

Thanks @maximium for the bug report and implementation!

Release Version 1.10.1

13 Dec 02:31
Compare
Choose a tag to compare

This is a bug fix release, fixing:
Incorrect handling of resources and intercept_exceptions App Config options #84
Issue with functools.partial in 1.10.0 using Python 2.7.9 #83

Shoutout to @diiq and @joonathan for reporting these issues!

Release Version 1.10.0

11 Dec 05:16
Compare
Choose a tag to compare
  • Adds support for returning CORS headers with uncaught exceptions in production so 500s will have expected CORS headers set. This will allow clients to better surface the errors, rather than failing due to security. Reported and tested by @robertfw -- thanks!
  • Improved conformance of preflight request handling to W3C spec.
  • Code simplification and 100% test coverage 😎

Release Version 1.9.0

20 Sep 18:48
Compare
Choose a tag to compare
  • Improves API consistency, allowing a CORS resource of '*'
  • Improves documentation of the CORS app extension
  • Fixes test import errors on Python 3.4.1 (Thanks @wking )

Release V1.8.1 Including tests in the Python package

18 Sep 00:18
Compare
Choose a tag to compare

Thanks to @wking's work in PR #71 python setup.py test will now work.

Release V1.8.0 Adding support for regexp origins

22 Aug 04:25
Compare
Choose a tag to compare

Adds support for regular expressions in the list of origins.

This allows subdomain wildcarding and should be fully backwards compatible.

Credit to @marcoqu for opening #54 which inspired this work