nelmio/cors-bundle
Adds CORS (Cross-Origin Resource Sharing) headers support in your Symfony application
Maintainers
2.6.1
2026-01-12 15:59 UTC
Requires
- psr/log: ^1.0 || ^2.0 || ^3.0
- symfony/framework-bundle: ^5.4 || ^6.0 || ^7.0 || ^8.0
Requires (Dev)
- phpstan/phpstan: ^1.11.5
- phpstan/phpstan-deprecation-rules: ^1.2.0
- phpstan/phpstan-phpunit: ^1.4
- phpstan/phpstan-symfony: ^1.4.4
- phpunit/phpunit: ^8
Suggests
None
Provides
None
Conflicts
None
Replaces
None
README
About
The NelmioCorsBundle allows you to send Cross-Origin Resource Sharing headers with ACL-style per-URL configuration.
Features
- Handles CORS preflight OPTIONS requests
- Adds CORS headers to your responses
- Configured at the PHP/application level. This is convenient but it also means that any request serving static files and not going through Symfony will not have the CORS headers added, so if you need to serve CORS for static files you probably should rather configure these headers in your web server
Installation
Require the nelmio/cors-bundle package in your composer.json and update your dependencies:
composer require nelmio/cors-bundle
The bundle should be automatically enabled by Symfony Flex. If you don't use Flex, you'll need to enable it manually as explained in the docs.
Usage
See the documentation for usage instructions.
License
Released under the MIT License, see LICENSE.