Skip to content

REST 3.2.0

Compare
Choose a tag to compare
@cundd cundd released this 16 Sep 16:11
· 407 commits to v5 since this release

Enhance CORS support

Breaking changes: Bypass access checks for OPTIONS requests

Description

Change ConfigurationBasedAccessController::getAccess() to always allow OPTIONS requests to be forwarded to the Router

Affected

If your custom extension provides a route for an OPTIONS request which should not be accessible without authentication

Migration

Some access check needs to be implemented in the custom extension