From 5709322eab1729e27cc17d4b03793b9987b11c18 Mon Sep 17 00:00:00 2001 From: arhimede Date: Tue, 4 Aug 2026 19:39:35 +0300 Subject: [PATCH 1/2] Update cors dist file to clarify how to restrict access-control-allow-origin header --- config/autoload/cors.local.php.dist | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/config/autoload/cors.local.php.dist b/config/autoload/cors.local.php.dist index 782b4ccf..36734b50 100644 --- a/config/autoload/cors.local.php.dist +++ b/config/autoload/cors.local.php.dist @@ -11,7 +11,9 @@ return [ * Leaving this line here makes your application accessible by any origin. * * To restrict, replace this line with a list of origins that should have access to your application. - * Example: 'domain1.com', 'domain2.com' + * Respect the protocol and the port, as 'https://www.dotkernel.com' is using a different port then + * 'http://www.dotkernel.com' or 'https://www.dotkernel.com:8080' + * Example: 'https://www.dotkernel.com', 'https://api.dotkernel.com' */ ConfigurationInterface::ANY_ORIGIN, ], From f3af9d7ce66706b3be4fd93d24daf9e3433c5e98 Mon Sep 17 00:00:00 2001 From: arhimede Date: Wed, 5 Aug 2026 19:36:53 +0300 Subject: [PATCH 2/2] Update cors dist file to clarify how to restrict access-control-allow-origin header Signed-off-by: arhimede --- config/autoload/cors.local.php.dist | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/config/autoload/cors.local.php.dist b/config/autoload/cors.local.php.dist index 36734b50..b0adb9b7 100644 --- a/config/autoload/cors.local.php.dist +++ b/config/autoload/cors.local.php.dist @@ -11,9 +11,7 @@ return [ * Leaving this line here makes your application accessible by any origin. * * To restrict, replace this line with a list of origins that should have access to your application. - * Respect the protocol and the port, as 'https://www.dotkernel.com' is using a different port then - * 'http://www.dotkernel.com' or 'https://www.dotkernel.com:8080' - * Example: 'https://www.dotkernel.com', 'https://api.dotkernel.com' + * @see https://docs.mezzio.dev/mezzio-cors/v1/middleware/#examples-for-project-configurations */ ConfigurationInterface::ANY_ORIGIN, ],