Fix security hotspot making cors by default less permissive

Author: oliemansm

example-graphql-tools/src/main/resources/application.yml

@@ -6,5 +6,3 @@ server:
 graphql:
   servlet:
     exception-handlers-enabled: true
-  tools:
-    introspection-enabled: false

graphql-spring-boot-autoconfigure/src/main/java/graphql/kickstart/spring/web/boot/GraphQLWebAutoConfiguration.java

@@ -159,7 +159,6 @@ public CorsConfiguration corsConfiguration() {
   @ConditionalOnProperty(value = "graphql.servlet.corsEnabled", havingValue = "true", matchIfMissing = true)
   public CorsFilter corsConfigurer(CorsConfiguration corsConfiguration) {
     Map<String, CorsConfiguration> corsConfigurations = new LinkedHashMap<>(1);
-    corsConfiguration.applyPermitDefaultValues();
     corsConfigurations.put(graphQLServletProperties.getCorsMapping(), corsConfiguration);
 
     UrlBasedCorsConfigurationSource configurationSource = new UrlBasedCorsConfigurationSource();