From 8958dca9395d90f9dcfa4b6ea1e9d7f92d45b421 Mon Sep 17 00:00:00 2001
From: silverpill <silverpill@firemail.cc>
Date: Sat, 11 Feb 2023 00:02:00 +0000
Subject: [PATCH] Document http_cors_allowlist configuration parameter

---
 CHANGELOG.md              | 4 ++++
 contrib/mitra_config.yaml | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d0e8d98..4a22d9e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+### Added
+
+- Documented `http_cors_allowlist` configuration parameter.
+
 ### Changed
 
 - Allow `instance_uri` configuration value to contain URI scheme.
diff --git a/contrib/mitra_config.yaml b/contrib/mitra_config.yaml
index 8f4db3c..f7e89dc 100644
--- a/contrib/mitra_config.yaml
+++ b/contrib/mitra_config.yaml
@@ -8,6 +8,9 @@ web_client_dir: /usr/share/mitra/www
 http_host: '127.0.0.1'
 http_port: 8383
 
+# List of allowed origins for CORS (in addition to main)
+#http_cors_allowlist: []
+
 # Log level (debug, info, warn)
 #log_level: info