CORS Changelog
Released changes to the CORS plugin (`cors`), newest release first.
13 released changes name cors, newest release first — 6 in Apache APISIX, 7 in API7 Gateway. Each row links to the change itself.
Apache APISIX
| Release | Date | Type | Change |
|---|---|---|---|
| 3.17.0 | 2026-06-11 | Fix | Harden cors, multi-auth and body-transformer plugins against malformed requests |
| 3.3.0 | 2023-04-30 | Change | CORS plugin will add Vary: Origin header when allow_origin is not * |
| 2.13.0 | 2022-03-21 | Feature | Set cors allow origins by plugin metadata |
| 2.5.0 | 2021-04-02 | Feature | Add allow_origins_by_regex to cors plugin |
| 1.5.0 | 2020-08-06 | Change | Add more configuration options for cors plugin. 1963 |
| 1.2.0 | 2020-04-12 | Feature | Add CORS plugin. |