pagemachine/cors

Cross Origin Resource Sharing for TYPO3 CMS.

CORS

Cross Origin Resource Sharing for TYPO3, _(*1)

Installation

This extension is installable from various sources:, _(*2)

1. Via Composer:, _(*3)

   composer require pagemachine/cors

2. From the TYPO3 Extension Repository, _(*4)

3. From Github

Configuration

All configuration options can be set via TypoScript setup in config.cors or per page object in page.config.cors. The following options are available:, _(*5)

Note that all options support stdWrap processing through their .stdWrap property., _(*6)

Examples

• Origin wildcarding:, _(*7)

  config.cors {
    allowOrigin = *
  }

• Simple list of origins:, _(*8)

  config.cors {
    allowOrigin = http://example.org, http://example.com
    // More readable version
    allowOrigin (
      http://example.org,
      http://example.com
    )
  }

• Matching origins via regular expressions:, _(*9)

  config.cors {
    allowOrigin.pattern = https?://example\.(org|com)
  }

• Allow specific methods:, _(*10)

  config.cors {
    allowMethods = GET, POST, PUT, DELETE
  }

• Allow headers:, _(*11)

  config.cors {
    allowHeaders = (
      Content-Type,
      ...
    )
  }

• Allow credential flag processing:, _(*12)

  config.cors {
    // Set to 1/true to enable
    allowCredentials = 1
  }

• Expose headers:, _(*13)

  config.cors {
    exposeHeaders (
      X-My-Custom-Header,
      X-Another-Custom-Header
    )
  }

• Set maximum age of preflight request result:, _(*14)

  config.cors {
    // 10 minutes
    maxAge = 600
  }

• Set maximum age via some stdWrap processing:, _(*15)

  config.cors {
    maxAge.stdWrap.cObject = TEXT
    maxAge.stdWrap.cObject {
      value = 600
    }
  }

Issues

Found a bug? Need a feature? Let us know through our issue tracker., _(*16)

Testing

All tests can be executed with the shipped Docker Compose definition:, _(*17)

docker-compose run --rm app composer build