NelmioCorsBundle | Adds CORS ( Cross-Origin Resource | REST library

by nelmio PHP Version: 2.2.0 License: MIT

X-Ray Key Features Code Snippets Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | NelmioCorsBundle Summary

NelmioCorsBundle is a PHP library typically used in Web Services, REST, Symfony applications. NelmioCorsBundle has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

The NelmioCorsBundle allows you to send Cross-Origin Resource Sharing headers with ACL-style per-URL configuration. If you want to have a global overview of CORS workflow, you can browse this image.

Support

Quality

Security

License

Reuse

Support

NelmioCorsBundle has a medium active ecosystem.

It has 1752 star(s) with 104 fork(s). There are 17 watchers for this library.

It had no major release in the last 12 months.

There are 33 open issues and 84 have been closed. On average issues are closed in 591 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of NelmioCorsBundle is 2.2.0

Quality

NelmioCorsBundle has 0 bugs and 0 code smells.

Security

NelmioCorsBundle has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

NelmioCorsBundle code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

NelmioCorsBundle is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

NelmioCorsBundle releases are available to install and integrate.

Installation instructions, examples and code snippets are available.

NelmioCorsBundle saves you 406 person hours of effort in developing the same functionality from scratch.

It has 966 lines of code, 60 functions and 18 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed NelmioCorsBundle and discovered the below as its top functions. This is intended to give you an instant insight into NelmioCorsBundle implemented functionality, and help decide if they suit your requirements.

Get preflight response .
Handles the configuration .
Get the configuration tree builder .
Handles the request event .
Register options resolver .
Returns the allow - origin configuration .
Add Vary headers .
Get options for a request .
Sorts the providers by priority .
Build the CorsConfiguration compiler .

Get all kandi verified functions for this library.

NelmioCorsBundle Key Features

No Key Features are available at this moment for NelmioCorsBundle.

NelmioCorsBundle Examples and Code Snippets

No Code Snippets are available at this moment for NelmioCorsBundle.

Community Discussions

Trending Discussions on NelmioCorsBundle

CORS error when i try to get images on Symfony 3

Cross-origin CSRF token check fails

QUESTION

CORS error when i try to get images on Symfony 3

Asked 2021-Aug-20 at 16:49

I've an issue on my project, i have a cordova app on tablet that need to retrieve image from an api, my api is on symfony 3 and have Nelmio CORS Bundle installed and configured, standart get request work and i have the 'Cross-origin-allow' on header but when i try to get image network say me "CORS Error: MissingAllowOriginHeader".

my bundle config:

...

ANSWER

Answered 2021-Aug-20 at 16:49

Nelmio CORS Bundle provides an easy way to control CORS, in this case is missing the node origin_regex.

Source https://stackoverflow.com/questions/68845444

QUESTION

Cross-origin CSRF token check fails

Asked 2020-Jun-22 at 22:06

I have website www.example.com which loads iframe from www.another.com. The page being loaded contains a HTML and JS which triggers an AJAX call to self (www.another.com). Both of these sites are behind HTTPS.

The iframe loads perfectly fine, the script is executing, BUT, when I click submit (which is part of iframe), I get that www.another.com rejected my request due to invalid CSRF token. The form within iframe does contain a token field, which has a value (some hash).

The ajax call works fine when I go directly to www.another.com.

From what I can grasp so far when ajax call arrives at the server it does not have session started, so it fails to find a token to match.

I use Symfony 4.4 with NelmioCorsBundle to ensure proper CORS. The config looks like this:

...

ANSWER

Answered 2020-Jun-22 at 20:40

Found a solution.

The domain www.another.com was sending Cookie header with SameSite=lax. That means that those cookies are not to be included unless top-level navigation is initiated. In the case of iframe AJAX call, that just won't cut it.

A workaround for this is to disable SameSite in framework.yml.

Source https://stackoverflow.com/questions/62519424

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install NelmioCorsBundle

An official Symfony Flex recipe is available for this bundle. To automatically install and configure it run:. Alternatively, if you don't use Symfony Flex, require the nelmio/cors-bundle package in your composer.json and update your dependencies.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: