All Versions
Latest Version
Avg Release Cycle
552 days
Latest Release
1782 days ago

Changelog History
Page 1

  • v0.2.7 Changes

    June 06, 2019
    • 🚚 Remove support for wai<3 and older versions of GHC from the code base.
    • πŸ“š Fix a documentation bug #23.
  • v0.2.6 Changes

    December 01, 2017
    • πŸ‘· Removed ghc-7.6.3 and versions of wai<3.0 from the CI test matrix. These versions are still supported in the code but cabal may need some manual help to resolve dependencies.

    • πŸ“š Fixes and improvements to the documentation. Thanks to Frederik HanghΓΈj Iversen, Alex Collins, and Maximilian Tagher.

  • v0.2.5 Changes

    • πŸ‘ Support GHC-8.0.1.

    • πŸ“¦ Removed dependencies on parsers package.

  • v0.2.4 Changes

    • Fix bug #1. Response header Vary: Origin is now included when corsVaryOrigin is True and corsOrigins does not equal Nothing.
  • v0.2.3 Changes

    • πŸ“¦ Added a test-suite to the package that uses PhantomJS to simulate a browser client.

    • πŸ“š Pass on websocket requests unchanged to the application. Add documentation that reminds the application author to check the Origin header for websocket requests.

    • 🚚 Move development source repository from to

  • v0.2.2 Changes

    • ⚠ Support GHC-7.10/base-4.8 without compiler warnings.

    • πŸ“¦ Drop dependency on errors package.

  • v0.2.1 Changes

    • Fix bug #8. Accept empty list as value for Access-Control-Request-Headers.


    This version may break existing code by changing the type of CorsResourcePolicy.

    This version changes the behavior of simpleCorsResourcePolicy: Before it was a failure when the request didn't contain an @Origin@ header. With this version the request is passed unchanged to the application. If an failure occurs during CORS processing the response has HTTP status 400 (bad request) and contains a short error messages. This behavior can be changed with the new settings corsRequireOrigin and corsIgnorefailure.

    • 🚚 Remove setting corsVerboseResponse from CorsResourcePolicy.

    • Add new settings corsRequireOrigin and corsIgnoreFailure to CorsResourcePolicy.

  • v0.1.4 Changes

    • πŸ‘ Support wai-3
  • v0.1.3 Changes

    • πŸ“š Improved documentation
  • v0.1.2 Changes

    • Export type synonym Origin

    • πŸ‘ New easy-to-use middleware function simpleCors that supports just simple cross-origin requests

    • The new value simpleCorseResourcePolicy is a CorseResourcePolicy for simple cross-origin requests.

    • πŸ“š Documentation has been slightly improved

    • βœ… Some code for testing simpleCors from a browser