Community
Participate
Working Groups
Seems reasonable to have allowCredentials to default to true, so that clients using CORS are allowed to send cookies to the server.
Fixed.