设置访问控制允许来源的可能安全问题

I see that setting "*" wildcard is security risk i.e.I see that setting "*" wildcard is security ris