In some cases, you might want to set the "credentials" flag for HTTP requests. But you can't use it everywhere, because it may break the use of public APIs. As a result, you're running into Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*' on the client side. See https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials for details. This commit restores the former default "false", in order to make WASM connections that worked prior 6.5 work again. Fixes: QTBUG-112478 Pick-to: 6.5 Change-Id: I46f6a374c07038608c3484ac831a1dc5999fb120 Reviewed-by: Mikołaj Boc <Mikolaj.Boc@qt.io> Reviewed-by: Lorn Potter <lorn.potter@gmail.com>