Description
From the /server-config/cors API, origins like below are rejected.
https://example.com/path
https://example.com?x=1
https://example.com#frag
However, when the same origins are added from the console, console converts them to regexes (like {"regex":"https://example.com/path"}) and send them in the PUT request, which is getting successful. This behavior obscures user intent and can introduce failures where strict origin matching is required.
Related: #4721
Steps to Reproduce
- Login to console
- Create an application
- Try to configure allowed origins
Version
v1.0.0-beta2
Environment Details (with versions)
No response
Description
From the /server-config/cors API, origins like below are rejected.
However, when the same origins are added from the console, console converts them to regexes (like
{"regex":"https://example.com/path"}) and send them in the PUT request, which is getting successful. This behavior obscures user intent and can introduce failures where strict origin matching is required.Related: #4721
Steps to Reproduce
Version
v1.0.0-beta2
Environment Details (with versions)
No response