Skip to content

Only enable full CORS config if a domain is specified

Daniel Gerhardt requested to merge fix-public-cors into 2.x

The public CORS config was always overriden by the more generic config. Credentials are no longer allowed to be sent with default CORS config.

Merge request reports