shreemaan-abhishek commented on PR #11498:
URL: https://github.com/apache/apisix/pull/11498#issuecomment-2373886575

   I'm not a cors expert but
   
   > When the values of the Origin for subsequent normal requests do not equal 
the values obtained by splitting the malicious request's Origin by ',', the 
cross-origin response headers will not be returned
   
   where is this check performed?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to