Wide open CORS not working?

Can you do an OPTIONS request using curl and see what response headers are sent?

See my comment linked below, as you want * ignore the comment on shceme://host format:

1 Like