We shouldn't use a wildcard CORS policy. Instead we should have a mandatory environment variable to set the CORS policy / allowed sources.
No dependencies set.
The note is not visible to the blocked user.
We shouldn't use a wildcard CORS policy. Instead we should have a mandatory environment variable to set the CORS policy / allowed sources.