How to force Vite server to return a full hostname instead of * in access-control-allow-origin?

[remorses]

CORS has some limitations like

• You cannot use fetch with credentials: 'include' if access-control-allow-origin is *
• You cannot fetch a http:// url from a https:// client if access-control-allow-origin is *

Please pass a full hostname instead of * by default or document how to force Vite to pass the full hostname

[sapphi-red]

You can set server.cors.origin: 'the-origin-you-want-to-allow'.