# CORS Configuration in Express.js - ID: javascript-express-cors-configuration - Severity: MEDIUM - Languages: JavaScript, TypeScript - Frameworks: express, fastify ## Description Detects overly permissive CORS configuration allowing any origin to access resources. ## Detection Message Application has overly permissive CORS configuration: {details} ## Remediation Configure CORS to allow only trusted origins. Avoid using wildcard (*) for authenticated endpoints. ## Documentation [object Object] ## Related Rules - **Docker Build Optimization and Best Practices** [LOW]: - **Docker Compose Obsolete Version Field** [LOW]: - **Docker File Operations Best Practices** [LOW]: - **Invalid Port Number in EXPOSE** [ERROR]: - **Multiple ENTRYPOINT Instructions** [MEDIUM]: