What's Changed
Behavior note
An origin array containing '*' is now treated as a wildcard also when it comes from a dynamic resolver (async or callback origin function) or from a route-level config.cors. These cases now respond with Access-Control-Allow-Origin: *, as the static origin: ['*'] option already did. Previously the header was omitted.
If a dynamic origin list of yours contains '*' unintentionally, remove it before upgrading.
New Contributors
Full Changelog: v11.4.2...v11.4.3