Define the “Access-Control-Allow-Origin”

[schmelz21]

💡 Summary

Mitigate a CORS Error from the application.

Motivation and context

The origin should be properly specified in the “Access-Control-Allow-Origin” header.  Ensure that origins specified in the “Access-Control-Allow-Origin” header are trusted.  Avoid utilizing a wildcards “*”.

Implementation notes

Please provide details for implementation, such as:

• Update all header information.

  Acceptance criteria

How do we know when this work is done?

• [ ] Deploy and test against an open source check