CORS

Strictly adheres to the W3 CORS specification with built-in protections, such as preventing unsafe configurations like allowing credentials with wildcard origins, as highlighted in the security section.

Seamlessly works with popular Go web frameworks like Gin, Chi, and Gorilla, with dedicated code examples provided in the README for easy adoption.

Benchmark results show low-latency operations (e.g., 51.40 ns/op for default setup) with zero allocations, ensuring minimal overhead in high-throughput applications.

Offers extensive parameters including allowed origins, methods, headers, and custom validation functions like AllowOriginVaryRequestFunc for dynamic CORS policies.