Small Feature Request: the ability to specify a fixed port for preview per project or globally (HTML/Framework7)

[franse]

@kfawcett

The * never worked properly

True, this was reported on more than one topic:

@bpj

if you use * you can’t use the ‘credentials’ attribute so it fails to set the log in cookie.

@jmartland22

On the CORS option I don’t think the * works.

Don't know if this is the exact case, but asked chatgpt because remember having a lot of troubles: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'

Using a wildcard (*) for the Access-Control-Allow-Origin header in your CORS configuration indeed prevents cookies from being included in cross-origin requests. This is because the Access-Control-Allow-Origin header must specify the exact origin when dealing with credentials (cookies, HTTP authentication, client-side SSL certificates).
When you set Access-Control-Allow-Origin to *, it indicates that any origin can access the resource. However, for security reasons, browsers block credentials from being sent if the CORS policy is too permissive. Specifically, the combination of Access-Control-Allow-Origin: * and Access-Control-Allow-Credentials: true is not allowed because it poses a security risk by potentially exposing sensitive data to unauthorized origins.

@George

We use the a general nodejs cors module and when * is given - we set the origin to true

Sorry but don't really understand how this is different
It's something new and I should expect a different behavior than the last year?

Will do more test about it, query is working, not sure about login and storing cookies..