allowAnyOrigin property

bool allowAnyOrigin

Disables Origin checking entirely.

The specification requires servers to validate Origin to prevent DNS rebinding, so this is not a knob to reach for; it exists for deployments that terminate the check in front of the server. Default false.

Implementation

final bool allowAnyOrigin;