Document http_cors_allowlist configuration parameter

CHANGELOG.md

@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+### Added
+
+- Documented `http_cors_allowlist` configuration parameter.
+
 ### Changed
 
 - Allow `instance_uri` configuration value to contain URI scheme.

contrib/mitra_config.yaml

@@ -8,6 +8,9 @@ web_client_dir: /usr/share/mitra/www
 http_host: '127.0.0.1'
 http_port: 8383
 
+# List of allowed origins for CORS (in addition to main)
+#http_cors_allowlist: []
+
 # Log level (debug, info, warn)
 #log_level: info