CORS Wildcard with Credentials
Criticalcors-wildcard-credentials
What it checks
CORS allows all origins with credentials
How to fix it
Never combine Access-Control-Allow-Origin: * with Allow-Credentials: true
Docs
Docs
Criticalcors-wildcard-credentials
CORS allows all origins with credentials
Never combine Access-Control-Allow-Origin: * with Allow-Credentials: true