Skip to content

GH-10988: Align HTTP Cross-Origin with Spring MVC#11003

Open
artembilan wants to merge 1 commit into
spring-projects:mainfrom
artembilan:GH-10988
Open

GH-10988: Align HTTP Cross-Origin with Spring MVC#11003
artembilan wants to merge 1 commit into
spring-projects:mainfrom
artembilan:GH-10988

Conversation

@artembilan
Copy link
Copy Markdown
Member

Fixes: #10988

The Spring MVC comes with allowedOrigins as empty list and allowCredentials as false by default.
In addition, Spring MVC provides now a flexible allowedOriginPatterns

  • Fix HTTP and WebFlux module to handle the required by Spring MVC defaults for CrossOrigin configuration

Auto-cherry-pick to 7.0.x & 6.5.x

Fixes: spring-projects#10988

The Spring MVC comes with `allowedOrigins` as empty list
and `allowCredentials` as `false` by default.
In addition, Spring MVC provides now a flexible `allowedOriginPatterns`

* Fix HTTP and WebFlux module to handle the required by Spring MVC defaults for `CrossOrigin` configuration

**Auto-cherry-pick to `7.0.x` & `6.5.x`**
@artembilan artembilan requested a review from cppwfs May 15, 2026 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Disable allowCredentials in the CrossOrigin and introduce originPatterns

1 participant