New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

feat: handle Chrome CORS preflight private network header #308

Open

randing89 wants to merge 1 commit into expressjs:master from randing89:allow-private-network

randing89 commented Nov 6, 2023

Based on https://developer.chrome.com/blog/private-network-access-preflight/

Chrome will start sending a CORS preflight request ahead of any private network request for a subresource, which asks for explicit permission from the target server. This preflight request will carry a new header, Access-Control-Request-Private-Network: true, and the response to it must carry a corresponding header, Access-Control-Allow-Private-Network: true.

This fixes #290 and #236


          feat: handle Chrome CORS preflight private network header

cfe3c25

randing89 force-pushed the allow-private-network branch from 227b0a3 to cfe3c25 Compare

November 6, 2023 10:56

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

None yet