Hi Community,

Can someone please guide us on creation of CORS policy for REST service configured in Pega Application. By default looks like Pega platform allows API calls, from the null origins too.

We want to put a policy in place to disallow the API calls, when they have header "Origin":"null"