https://issues.apache.org/bugzilla/show_bug.cgi?id=57178
--- Comment #5 from Mark Thomas <ma...@apache.org> --- What is the use case for excluding the null origin but allowing all others? I've been reading through the CORS spec and related documents and haven't seen anything that suggests a use case. What I have read suggests that null should always be included in *. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org