Setting up CORS headers will control which websites can make browser-based HTTP requests to your API. The Access-Control-Allow-Origin header should be defined on all responses.
OWASP API8 2023 Define CORS Origin
Message: Header Access-Control-Allow-Origin should be defined on all responses.
