Whitelist for CORS from database?

Question

JavaScript

Need advice.
Domains for the CORS whitelist are added to the application. Accordingly, verification of requests is needed.
Is it correct to crawl into the database and look at the white list with each request to the server? Or is there a better practice?

Answer 1

Considering that CORS does not support wildcards and regexps, it is impossible to do without a check and there is no normal practice here. Measure how long it takes you to check with a query to the database, and if it suits you, then work like this. If not, then look for a suitable database option or store a white list directly in the code.