Is the CORS middleware repo still maintained?

[ChronosMasterOfAllTime]

As the title states, is the https://github.com/go-chi/cors repo still maintained/monitored? We have an outstanding issue with an open PR to fix it. Thank you!

We love the simplicity of the chi router. Much more lightweight than the others

[VojtechVitek]

Hi, yes, the https://github.com/go-chi/cors repo is still maintained. We will review the PRs once our busy schedules allow it.

Please, consider sponsoring the authors to bump up priority.

Thank you for your patience.

[ChronosMasterOfAllTime]

Thanks for confirming it's still active @VojtechVitek.

I made a low risk (and backwards compatible) change to handle pre parsed multi value headers. Currently the implementation assumes the header will be single value only. I added a workaround to the issue so it's not a blocker to anyone.

[jub0bs]

@ChronosMasterOfAllTime Just passing by to mention that github.com/jub0bs/cors is an alternative CORS middleware library compatible with Chi that might fulfil your needs.

[ptman]

I'm using the stdlib CrossOriginProtection middleware, works great

[jub0bs]

@ptman Be aware that http.CrossOriginProtection and CORS middleware fulfil opposite needs: the former is a defence against cross-origin attacks; the latter is not a defence, since CORS's purpose is to relax the Same-Origin Policy for some browser-based clients.

[ptman]

@jub0bs you're right, I wasn't fully awake and was thinking about CSRF