golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(19.3-06): cors:<profile> headers on every response of the route (CR-01)

Browse Source 
- Router.wrap applies the route's profile outside recovery, body limit and
  locale, whatever its position in the list or the group nesting
- bufferedResponse.commit merges Vary instead of replacing it
- TestCORSProfileHeadersOnRefusals, TestCORSProfileVaryKeptWithHandlerVary
  required by name in the gate
This commit is contained in:
Jakub Zych
2026-10-15 22:24:08 +02:00
parent e9ad640999
commit 072353663e
7 changed files with 226 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
scripts/check-phase19.3.sh
View File

@@ -71,6 +71,7 @@ SURF_TESTS=(
TestCORSOptionsMatchesLaravel
TestCORSProfilePreflightRoute TestCORSProfileUnknown TestCORSProfileWithPathsRefused
TestCORSProfileOverlapGlobal TestCORSProfileConflictingProfilesSamePath
TestCORSProfileHeadersOnRefusals TestCORSProfileVaryKeptWithHandlerVary
TestTurnstileFactoryParams
TestAPIDocsOffByDefault TestAPIDocsServesPinnedPage TestAPIDocsSpecJSONOrder
TestAPIDocsJSONSpecInput TestAPIDocsProviderCount TestAPIDocsPathValidation