|
|
|
@ -451,7 +451,7 @@ public class CorsConfiguration {
@@ -451,7 +451,7 @@ public class CorsConfiguration {
|
|
|
|
|
this.allowedOrigins != null && this.allowedOrigins.contains(ALL)) { |
|
|
|
|
|
|
|
|
|
throw new IllegalArgumentException( |
|
|
|
|
"When allowCredentials is true, allowedOrigins cannot contain the special value \"*\"" + |
|
|
|
|
"When allowCredentials is true, allowedOrigins cannot contain the special value \"*\" " + |
|
|
|
|
"since that cannot be set on the \"Access-Control-Allow-Origin\" response header. " + |
|
|
|
|
"To allow credentials to a set of origins, list them explicitly " + |
|
|
|
|
"or consider using \"allowedOriginPatterns\" instead."); |
|
|
|
|