v11.4.3

What's Changed

• fix: normalize dynamic origin wildcard arrays by @lprnmns in #420

Behavior note

An origin array containing '*' is now treated as a wildcard also when it comes from a dynamic resolver (async or callback origin function) or from a route-level config.cors. These cases now respond with Access-Control-Allow-Origin: *, as the static origin: ['*'] option already did. Previously the header was omitted.

If a dynamic origin list of yours contains '*' unintentionally, remove it before upgrading.

New Contributors

• @lprnmns made their first contribution in #420

Full Changelog: v11.4.2...v11.4.3