Does the "Specify Origin field" within the "Process CORS Request Properties" allow the usage of wildcards?

Products

• STARTER PACK-7
• CA Rapid App Security
• CA API Gateway

Issue/Introduction

While using the CORS feature, does the "Specify Origin field" within the "Process CORS Request Properties" allow the usage of wildcards for the added URLs?

Environment

All Supported versions of API Gateway.

Resolution

Wildcards are not yet supported for the "Specify Origin" field. 

As a workaround could be suggested, that a Policy logic will be created outside of the CORS Assertion where the Policy verify if origin is subdomain of an accepted origin, if not fail the policy, if yes, follow with a CORS assertion will allow all for origin.