This question has already been asked and answered here: 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*'
This question has already been asked and answered here: 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*'