<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Api on BareProxy.com</title>
    <link>https://bareproxy.com/tags/api/</link>
    <description>Recent content in Api on BareProxy.com</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Thu, 08 Oct 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://bareproxy.com/tags/api/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>BareProxy CORS Plugin: Cross-Origin Rules and Preflight Answers for APIs</title>
      <link>https://bareproxy.com/bareproxy-cors-plugin-cross-origin-rules-and-preflight-answers-for-apis/</link>
      <pubDate>Thu, 08 Oct 2026 00:00:00 +0000</pubDate>
      <guid>https://bareproxy.com/bareproxy-cors-plugin-cross-origin-rules-and-preflight-answers-for-apis/</guid>
      <description>&lt;p&gt;&lt;strong&gt;Status: built, number 2 of 21 in BareProxy&amp;rsquo;s build order, and out in BareProxy 0.4.0&lt;/strong&gt; as &lt;code&gt;cors.wasm&lt;/code&gt; on the &lt;a href=&#34;https://github.com/BareProxy/bareproxy/releases/latest&#34;&gt;releases page&lt;/a&gt;. It only touches headers, which is why it came second. Its manual is the &lt;a href=&#34;https://github.com/BareProxy/bareproxy/tree/main/plugins/cors&#34;&gt;README in the code repository&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;A web page on one origin that calls an API on another runs into the browser&amp;rsquo;s same-origin policy. The API has to say which origins may call it, with which methods and headers, in &lt;code&gt;Access-Control-*&lt;/code&gt; response headers. Before most calls, the browser first sends an &lt;code&gt;OPTIONS&lt;/code&gt; preflight request and waits for the answer.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
