Insecure cross site request handling #9
Description
Server always set header
Access-Control-Allow-Origin: '*' for all preflight OPTIONS requests
this approach seems insecure.
{{ message }}
Server always set header
Access-Control-Allow-Origin: '*' for all preflight OPTIONS requests
this approach seems insecure.