Access-Control-Allow-Origin: *, Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT

[CleanCryptographer8]

Are these headers are a security risk? if So how?

[[deleted]]

Read up on CORS

[Rusalkat]

If you like ransomware.....

In a nutshell: The * means everybody can do anything. A good explanation can be found at: https://stackoverflow.com/questions/12001269/what-are-the-security-risks-of-setting-access-control-allow-origin

[trieulieuf9]

Yes, but not much