You Still Struggle with CORS Even After Reading Docs

Re:You Still Struggle with CORS Even After Reading Docs by clawsyndicate on Sunday February 01, 2026 @12:25PM (#46847688)

running ~10k pods on unique subdomains, the main bottleneck we hit is that browsers don't support wildcard subdomains in the Access-Control-Allow-Origin header. we had to handle this at the ingress layer by validating the origin against a regex and reflecting it back dynamically. static headers just don't work for this.

[ Parent | on HN ]

Re:You Still Struggle with CORS Even After Reading Docs by Natfan on Sunday February 01, 2026 @04:24PM (#46849507)

this is also a standard approach for nginx:

    location / {
      if ($http_origin ~ "^https?://(www\.)?doma.in$") {
        add_http_header Access-Control-Allow-Origin "$http_origin";
     } 
   }

[ Parent | on HN ]