Hi,
I am working on ASP.NET ,AZURE.
We have deployed our website on AZURE Web App and run the OWASP tool to check security issues.
It gives the exception on Cross-Domain Misconfiguration,
for the evidences - Access-Control-Allow-Origin: *, which we have used in Web.Config are as below.
<add name="Access-Control-Allow-Origin" value="*" />
<add name="Access-Control-Allow-Headers" value="Origin, X-Requested-With, Content-Type, Accept,Authorization" />
<add name="Access-Control-Allow-Methods" value="GET,POST,PUT,DELETE,OPTIONS" />
<add name="Access-Control-Allow-Credentials" value="true" />
Please suggest how to resolve this type of exception.
Regards
Uday Mahajan