3 ms·
> Allows CORS from any domain with any headers without OPTIONS preflights. That'd be a great way to make CSRF attacks from any domain a default setting.
by beaconstudios 10y ago
> Allows CORS from any domain with any headers without OPTIONS preflights.
That'd be a great way to make CSRF attacks from any domain a default setting.