Re: [whatwg/fetch] Allow * for Access-Control-Allow-Headers and Access-Control-Allow-Methods (#251)

I strongly agree with @sicking's reasoning.

I want to re-iterate that `* ` should still not allow sending [forbidden headers](https://fetch.spec.whatwg.org/#forbidden-header-name) or [forbidden methods](https://fetch.spec.whatwg.org/#forbidden-method).

:+1: to allowing * for on Access-Control-Allow-Headers and Access-Control-Allow-Methods non-credentialed requests

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/251#issuecomment-205199001