You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@lgierth I think you know most about what HTTP headers to expect.
When configured to accept all origins, old versions of rs/cors send an AllowOrigin: <sent Origin> header. New versions will send AllowOrigin: *. Should I change the tests to accept both the supplied Origin and * when configured to accept all origins, or do we need to fix something in the code? CORS, like most web "technology", is still bat country to me... 🦇
Namely, when using rs/cors@8dd4211 or later.
The text was updated successfully, but these errors were encountered: