Server always set header `Access-Control-Allow-Origin: '*'` for all preflight OPTIONS requests this approach seems insecure.
Server always set header
Access-Control-Allow-Origin: '*'for all preflight OPTIONS requeststhis approach seems insecure.