restricted CORS settings

2026-02-25 23:02:18 +01:00
parent 53abb24482
commit 7235ca1897
1 changed files with 3 additions and 1 deletions
--- a/api/server/config.yml
+++ b/api/server/config.yml
@@ -16,7 +16,9 @@ api:
    CORS:
      max_age: 300
      allowed_origins:
-        - "*"
+        - "https://sendico.io"
+        - "https://app.sendico.io"
+        - "https://www.sendico.io"
      allowed_methods:
        - "GET"
        - "POST"