envoyproxy / envoyproxy/gateway
`allowOrigins` different behaviors in SecurityPolicy and HTTPRouter
Open
area/api
stale
- Dominant language
- Go
- Stars
- 3k
- Forks
- 864
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 140
Description
For SecurityPolicy, `*` is allowed and is not in HTTPRoute.
```
spec.rules[1].filters[1].cors.allowOrigins[0]: Invalid value: "*": spec.rules[1].filters[1].cors.allowOrigins[0] in body should match '^(([^:/?#]+):)(//([^/?#]*))([^?#]*)(\?([^#]*))?(#(.*))?'
```
what's the best choice? should EG align with Gateway API?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.