CORS

    The CORS filter supports the following RuntimeFractionalPercent settings:

    filter_enabled

    The % of requests for which the filter is enabled. The default is 100/HUNDRED.

    To utilize runtime to enable/disable the CORS filter set the value of the filter_enabled field.

    If present, this will override the field of the configuration.

    shadow_enabled

    The % of requests for which the filter is enabled in shadow only mode. Default is 0. If present, this will evaluate a request’s Origin to determine if it’s valid but will not enforce any policies.

    To utilize runtime to enable/disable the CORS filter’s shadow mode set the runtime_key value of the field.

    Note

    If both and are on, the flag will take precedence.

    Statistics

    The CORS filter outputs statistics in the .cors.* namespace.

    Note