Skip to content

Insecure cross site request handling #9

Open
Open
Insecure cross site request handling#9
Assignees
irusland
Labels
bugSomething isn't working
Milestone
Server Enhancement

Description

@irusland
irusland
opened on Nov 23, 2020

Server always set header
Access-Control-Allow-Origin: '*' for all preflight OPTIONS requests
this approach seems insecure.

Activity

  1. irusland
    added
    bugSomething isn't working
    on Nov 23, 2020
  2. irusland
    self-assigned this
    on Nov 23, 2020
  3. irusland
    added this to the Server Enhancement milestone on Nov 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions