How come "Allowed Web Origins" does not allow wildcards?

Just chiming in to thank you for this. It’s working perfectly for me and solves a really major pain point.

indeed a good news, I realised was working with * by mistake the past week and this explains it now, thanks for this better late than never :slight_smile:

Perfect! Glad to hear all that!