Why this matters
A weak or missing CORS policy may allow unauthorized domains to access your resources. Always define strict CORS rules to control access.
Ensure that CORS policies are properly defined. Weak or missing CORS policies may allow unauthorized domains to access your resources, leading to security vulnerabilities.
A weak or missing CORS policy may allow unauthorized domains to access your resources. Always define strict CORS rules to control access.
Side-by-side examples engineers can pattern-match during review.
new ApolloServer({});new ApolloServer({
cors: {
origin: ['https://trusted.com'],
},
});new ApolloServer({});new ApolloServer({
cors: {
origin: ['https://trusted.com'],
},
});From the same buckets as this rule.