Describe the bug
Original conversation: #4718 (comment)
with corsEnabled true in Gateway, there is nothing to prevent an error in Gateway if a service provides * as allowedOrigin.
It's relatively low risk since it's not recommended to set *, but Gateway under this scenario uses allowedOrigin instead of allowedOriginPattern.
Expected behavior
If the service provides * it should use allowedOriginPattern.
Describe the bug
Original conversation: #4718 (comment)
with corsEnabled true in Gateway, there is nothing to prevent an error in Gateway if a service provides
*as allowedOrigin.It's relatively low risk since it's not recommended to set
*, but Gateway under this scenario uses allowedOrigin instead of allowedOriginPattern.Expected behavior
If the service provides
*it should use allowedOriginPattern.