CORS policy bug on sign-in page

[PhantomWatson]

You have a CORS policy problem on /account/sign-in:

Access to XMLHttpRequest at 'https://stats.pandora.com/json' from origin 'https://www.pandora.com' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

[AdamPandora · Accepted solution]

Thank you for letting us now, @PhantomWatson.

I have passed your feedback along to our engineering team for further review.

Hope we continue to see you around the Community!