From 738e9b12c0cdb13767420edaae5b84d21f0237cf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alejandro=20Mart=C3=ADn=20Parra?= <32337177+Jandoria@users.noreply.github.com> Date: Sun, 1 Sep 2019 13:31:56 +0200 Subject: [PATCH] there must be exactly the origin there. --- 5-network/05-fetch-crossorigin/article.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/5-network/05-fetch-crossorigin/article.md b/5-network/05-fetch-crossorigin/article.md index 4a08cd1a..67e83f56 100644 --- a/5-network/05-fetch-crossorigin/article.md +++ b/5-network/05-fetch-crossorigin/article.md @@ -341,7 +341,7 @@ Access-Control-Allow-Origin: https://javascript.info Access-Control-Allow-Credentials: true ``` -Please note: `Access-Control-Allow-Origin` is prohibited from using a star `*` for requests with credentials. Like shown above, the origin must be explicit. That's an additional safety measure, to ensure that the server really knows who it trusts to make such requests. +Please note: `Access-Control-Allow-Origin` is prohibited from using a star `*` for requests with credentials. Like shown above, there must be exactly the origin there. That's an additional safety measure, to ensure that the server really knows who it trusts to make such requests. ## Summary