Jordi Boggiano

You mentioned the request header on Firefox is `Origin: https://127.0.0.1:8080` - what is Chrome sending as Origin header? I imagine this might be the issue.. as your allow_origin is `https://localhost:8080`...

As far as I can tell this was solved by [2.0.0](https://github.com/nelmio/NelmioCorsBundle/releases/tag/2.0.0) in https://github.com/nelmio/NelmioCorsBundle/commit/2c463446186b4fa0cef64f8783372de57aae6f46 - if anyone still has this issue with the latest version please open a new issue with...

Fixed by https://github.com/nelmio/NelmioCorsBundle/pull/169

If you can still reproduce this please reopen a new issue with config details and which symfony and bundle version you are using. Then we can maybe figure it out.....

The bundle is asf ar as I know never setting duplicate headers, so if you're +1ing here, please give more details or look at what else you have running in...

> An idea is to have the bundle check for the headers and create a warning if duplicates are present. The bundle cannot do this check, if you configure your...

Sorry but if you can't find the actual issue or a reliable way to reproduce I cannot do anything here.

Closing as it seems nobody had any interest in pushing this further.

[Per the spec ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin)you can only use `*` or plain names. Or you can use origin_regex true and then use regexes to let the bundle match multiple hosts and return...

Closing here as I am not sure what the issue is. I definitely don't have problems on symfony 5 or 6. If someone still has an issue please open a...