CORS

    The fraction of requests for which the filter is enabled can be configured via the runtime_key value of the field.

    The fraction of requests for which the filter is enabled in shadow-only mode can be configured via the runtime_key value of the field. When enabled in shadow-only mode, the filter will evaluate the request’s Origin to determine if it’s valid but will not enforce any policies.

    If both and are on, the flag will take precedence.

    Statistics

    The CORS filter outputs statistics in the <stat_prefix>.cors.* namespace.

    Note

    Requests that do not have an Origin header will be omitted from statistics.