<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cors on MacWorks</title><link>https://macworks.dev/tags/cors/</link><description>Recent content in Cors on MacWorks</description><generator>Hugo</generator><language>en</language><atom:link href="https://macworks.dev/tags/cors/index.xml" rel="self" type="application/rss+xml"/><item><title>2026-04-09</title><link>https://macworks.dev/docs/week/simonwillison/simonwillison-2026-04-09/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://macworks.dev/docs/week/simonwillison/simonwillison-2026-04-09/</guid><description>&lt;h1 id="simon-willison--2026-04-09"&gt;Simon Willison — 2026-04-09&lt;a class="anchor" href="#simon-willison--2026-04-09"&gt;#&lt;/a&gt;&lt;/h1&gt;
&lt;h2 id="highlight"&gt;Highlight&lt;a class="anchor" href="#highlight"&gt;#&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;Today&amp;rsquo;s most substantive update is the release of &lt;code&gt;asgi-gzip 0.3&lt;/code&gt;, which serves as a great practical reminder of the hidden risks in automated maintenance workflows. A silently failing GitHub Action caused his library to miss a crucial upstream Starlette fix for Server-Sent Events (SSE) compression, which ended up breaking a new Datasette feature in production.&lt;/p&gt;
&lt;h2 id="posts"&gt;Posts&lt;a class="anchor" href="#posts"&gt;#&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;[asgi-gzip 0.3]&lt;/strong&gt; · &lt;a href="https://simonwillison.net/2026/Apr/9/asgi-gzip/#atom-everything"&gt;Source&lt;/a&gt;
Simon released an update to &lt;code&gt;asgi-gzip&lt;/code&gt; after a production deployment of a new Server-Sent Events (SSE) feature for Datasette ran into trouble. The root cause was &lt;code&gt;datasette-gzip&lt;/code&gt; incorrectly compressing &lt;code&gt;event/text-stream&lt;/code&gt; responses. The library relies on a scheduled GitHub Actions workflow to port updates from Starlette, but the action had stopped running and missed Starlette&amp;rsquo;s upstream fix for this exact issue. By running the workflow and integrating the fix, both &lt;code&gt;datasette-gzip&lt;/code&gt; and &lt;code&gt;asgi-gzip&lt;/code&gt; now handle SSE responses correctly.&lt;/p&gt;</description></item><item><title>Simon Willison</title><link>https://macworks.dev/docs/week/simonwillison/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://macworks.dev/docs/week/simonwillison/</guid><description>&lt;h1 id="simon-willison--week-of-2026-04-04-to-2026-04-10"&gt;Simon Willison — Week of 2026-04-04 to 2026-04-10&lt;a class="anchor" href="#simon-willison--week-of-2026-04-04-to-2026-04-10"&gt;#&lt;/a&gt;&lt;/h1&gt;
&lt;h2 id="highlight-of-the-week"&gt;Highlight of the Week&lt;a class="anchor" href="#highlight-of-the-week"&gt;#&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;Anthropic&amp;rsquo;s decision to delay the general release of their highly capable Claude Mythos model under &amp;ldquo;Project Glasswing&amp;rdquo; marks a significant turning point in the AI industry. The move underscores a massive shift in frontier model capabilities, as models evolve from generating text to autonomously chaining multiple minor vulnerabilities into sophisticated exploits, requiring a new level of security safeguards before release.&lt;/p&gt;</description></item></channel></rss>