yyqdbngt opened a new pull request, #2411:
URL: https://github.com/apache/rocketmq-dashboard/pull/2411

   ## Summary
   
   - fail fast when `*` is combined with credentialed CORS
   - validate configured entries as pathless HTTP(S) origins
   - cover valid multi-origin and invalid wildcard/path/scheme configurations
   
   ## Why
   
   Spring cannot use an allowed origin of `*` together with credentials and 
otherwise fails at request time. Path-bearing or unsupported origin strings 
silently never match browser Origin headers.
   
   ## Tests
   
   - `mvn -q -f server/pom.xml -Dtest=CorsConfigTest test`
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to