Fearless CORS: Philosophy for CORS middleware libraries and a Go implementation

Some of the best, most elucidating insights into CORS I've read.