This is a filter which handles Cross-Origin Resource Sharing requests based on route or virtual host settings. For the meaning of the headers please refer to the pages below.
This filter should be configured with the type URL
The fraction of requests for which the filter is enabled in shadow-only mode can be configured via the runtime_key value of the shadow_enabled field. When enabled in shadow-only mode, the filter will evaluate the request’s Origin to determine if it’s valid but will not enforce any policies.
shadow_enabled are on, the
flag will take precedence.
The CORS filter outputs statistics in the <stat_prefix>.cors.* namespace.
Requests that do not have an Origin header will be omitted from statistics.
Number of requests that have a valid Origin header.
Number of requests that have an invalid Origin header.