diff --git a/internal/config/config_validation_internal_test.go b/internal/config/config_validation_internal_test.go
index cb6f9ca..cb8efb2 100644
--- a/internal/config/config_validation_internal_test.go
+++ b/internal/config/config_validation_internal_test.go
@@ -792,6 +792,23 @@ func invalidSizeAndOriginCases() []abortCase {
 				keyAccessControlAllowOrigin, "https://example.com/",
 			},
 		},
+		{
+			name:              "access_control_allow_origin host *",
+			yaml:              signingKeyLine + "access_control_allow_origin: https://*\n",
+			wantErrSubstrings: []string{keyAccessControlAllowOrigin, "https://*"},
+		},
+		{
+			name: "access_control_allow_origin host *.example.com",
+			yaml: signingKeyLine +
+				"access_control_allow_origin: https://*.example.com\n",
+			wantErrSubstrings: []string{keyAccessControlAllowOrigin, "https://*.example.com"},
+		},
+		{
+			name: "access_control_allow_origin host *example.com",
+			yaml: signingKeyLine +
+				"access_control_allow_origin: https://*example.com\n",
+			wantErrSubstrings: []string{keyAccessControlAllowOrigin, "https://*example.com"},
+		},
 		{
 			name:              "access_control_allow_origin empty",
 			yaml:              signingKeyLine + "access_control_allow_origin: \"\"\n",