[BUG] Listing Origin as an allowed request header is unnecessary #245
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
The middleware lists Origin as an allowed request header. However, listing Origin is never necessary because that header is added to requests by the browser, never by the client.
Expected Behavior
Not listing Origin as an allowed request header.