[outputs]
# Multi-entry allowlist that *contains* the wildcard alongside a trusted origin.
# Starlette treats this as "allow all origins"; the REST guard must therefore
# still disable credentials for this case (GHSA-fp27-88fp-2phg).
cors_origins=*,https://trusted.glances.test
cors_credentials=true
