warnCorsCredentials method

void warnCorsCredentials()

print one warning when the CORS config allows every origin with credentials. Browsers do not accept this. It does not change the headers Dox sends.

Implementation

void warnCorsCredentials() {
  CORSConfig cors = config.cors;
  dynamic origin = cors.origin;
  bool any = origin == '*' || (origin is List && origin.contains('*'));
  if (_warnedCorsCredentials || cors.credentials != true || !any) return;
  _warnedCorsCredentials = true;
  // stderr, not Logger: the logger is off by default
  stderr.writeln(corsCredentialsWarning);
}