CORS restricted to a specific origin
Access-Control-Allow-Origin names a specific origin rather than * or the probe origin.
Why it matters
Only that origin may read the response in a browser.
What to do
No change is required if that origin is one you meant to allow.
Reference
CORS controls which origins may read responses and must not expose credentialed data broadly.