v1.1.0

• Segregate preflight vs. inflight CORS requests. Preflight detection continues to happen during the "route" event. However, inflight requests are detected now during the "finish" event in order to ensure they operate on the same response object as will be sent back to the client. (#16)

v1.0.2

• Properly set "Access-Control-Allow-Credentials" header for normal requests if credentials are allowed (#13).

v1.0.1

• ZfrCors previously needed you to add the host URI in the allowed origins array. This was obviously wrong, so now if your app is hosted on "example.com", you don't need to add "example.com" as your allowed origins, as it should be automatically allowed.

v1.0.0

Total issues resolved: 7

• 1: Cors support
• 2: Tests setup
• 3: Update CORS
• 8: Update documentation