PO032 reports error when <ExposeHeaders>*</ExposeHeaders>

This is not an error, nor should it be a warning, it's a valid configuration.

However, mixing a '*' with other headers should be an error.

This is a minor coding error
Line #124 in PO032-CORS-hygiene.js
had: else if (h == '*' && headers.length != 0){
should be: else if (h == '*' && headers.length > 1){