This is a filter which handles Cross-Origin Resource Sharing requests based on route or virtual host settings. For the meaning of the headers please refer to the pages below.
This filter should be configured with the type URL
This filter will be used to respond to preflight
OPTIONS requests. Any legal
OPTIONS requests will be
responded directly by the filter and will not be passed to the next filter in the filter chain. Other requests
will not be responded directly but if they are accepted cors requests, the filter will add the related headers
to the response.
In addition, this filter will be bypassed if a direct response or route redirect is configured for the route.
The fraction of requests for which the filter is enabled in shadow-only mode can be configured via the runtime_key value of the shadow_enabled field. When enabled in shadow-only mode, the filter will evaluate the request’s Origin to determine if it’s valid but will not enforce any policies.
shadow_enabled are on, the
flag will take precedence.
The CORS filter outputs statistics in the
Requests that do not have an Origin header will be omitted from statistics.
Number of requests that have a valid Origin header.
Number of requests that have an invalid Origin header.