diff --git a/app/main.py b/app/main.py
index a9ffff8..89798c0 100644
--- a/app/main.py
+++ b/app/main.py
@@ -45,8 +45,9 @@ async def lifespan(app: FastAPI):
 
 app.add_middleware(
     CORSMiddleware,
+    # Wildcard origins must not be combined with credentialed CORS responses.
     allow_origins=["*"],
-    allow_credentials=True,
+    allow_credentials=False,
     allow_methods=["*"],
     allow_headers=["*"],
 )