diff --git a/testing/web-platform/tests/cors/origin.htm b/testing/web-platform/tests/cors/origin.htm
index a04a29eb497f7..9169ec74f7060 100644
--- a/testing/web-platform/tests/cors/origin.htm
+++ b/testing/web-platform/tests/cors/origin.htm
@@ -71,8 +71,14 @@ <h1>Access-Control-Allow-Origin handling</h1>
 shouldFail(location.protocol.toUpperCase() + "//" + location.host)
 shouldFail("-")
 shouldFail("**")
+shouldFail(",*");
+shouldFail("*,");
 shouldFail("\0*")
+shouldFail("\u000B*");
+shouldFail("\u000C*");
 shouldFail("*\0")
+shouldFail("*\u000B");
+shouldFail("*\u000C");
 shouldFail("'*'")
 shouldFail('"*"')
 shouldFail("* *")