Details
Major Description
Currently, CrossOriginFilter.java limits regex matching only if there is an asterisk (*) in the config.
if (allowedOrigin.contains("*")) {
This means that entries such as:
http?://foo.example.com https://[a-z][0-9].example.com
... and other patterns that succinctly limit the input space need to either be fully expanded or dramatically have their space increased by using an asterisk in order to pass through the filter.
