4 ms·
* is blocked by most browsers to avoid lazy developers putting their site wild open to abuse.
by user5994461 6y ago
* is blocked by most browsers to avoid lazy developers putting their site wild open to abuse.
- zackify 6y agoChrome and Firefox do not. If that’s really the case with your browser.... set it to request.origin, so it’s always valid haha
- 411111111111111 6y agoAt least Chrome and Firefox don't block it. I've recently used something similar as an add-on until I did exactly what he said: manually setting a cors * header for that internal development server