monsur / enable-cors.org

Advocacy for CORS
http://enable-cors.org/
208 stars 98 forks source link

Preventing whitlisting of * in CORS #143

Closed oliviernt closed 5 years ago

oliviernt commented 5 years ago

In order to prevent users from copy & pasting the code as is and opening themselves up to the whole internet, I'm suggesting the change of the Access-Control-Allow-Origin header value.

monsur commented 5 years ago

Thank you!