WS-2021-0193

Handlers in versions v1.1 to v1.2.1 is allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy. related to cors.go...