docs: update example CORS config to not allow all origins (#562)

6 years ago · 2a7eba9d40
parent 8de60c3dfd
commit 2a7eba9d40
1 changed files with 1 additions and 1 deletions
--- a/website/content/docs/configuration/controller.mdx
+++ b/website/content/docs/configuration/controller.mdx
@ -66,7 +66,7 @@ listener "tcp" {

  # Enable CORS for the Admin UI
  cors_enabled = true
-  cors_allowed_origins = ["*"]
+  cors_allowed_origins = ["yourcorp.yourdomain.com"]
 }

 # Data-plane listener configuration block (used for worker coordination)