search

fdimuccio / play2-sockjs

A SockJS server implementation for Play Framework.
Apache License 2.0
62 stars 11 forks source link

Header Access‐Control‐Allow‐Origin: * #37

Open ProChirathF opened 2 years ago

ProChirathF commented 2 years ago

Header Access‐Control‐Allow‐Origin: * is set in the response of /info Request  GET /ws/info?t=1644820694965 HTTP/1.1

Response Access‐Control‐Allow‐Origin: *

is it possible to disable/set this header value by the app?

PenTesting picks this as a misconfiguration.