Add SetIsOriginAllowedToAllowWildcardSubdomains_DoesNotAllowRootDomain test (#23001)

This test makes it clear root domains are not included in CORS subdomain wildcards

Author: kendaleiv

src/Middleware/CORS/test/UnitTests/CorsPolicyBuilderTests.cs

@@ -205,6 +205,20 @@ public void SetIsOriginAllowedToAllowWildcardSubdomains_AllowsWildcardSubdomains
             Assert.True(corsPolicy.IsOriginAllowed("http://test.example.com"));
         }
 
+        [Fact]
+        public void SetIsOriginAllowedToAllowWildcardSubdomains_DoesNotAllowRootDomain()
+        {
+            // Arrange
+            var builder = new CorsPolicyBuilder("http://*.example.com");
+
+            // Act
+            builder.SetIsOriginAllowedToAllowWildcardSubdomains();
+
+            // Assert
+            var corsPolicy = builder.Build();
+            Assert.False(corsPolicy.IsOriginAllowed("http://example.com"));
+        }
+
         [Fact]
         public void WithMethods_AddsMethods()
         {