From cd2c92fd6cc357354a2f0764383688aeb660e0d7 Mon Sep 17 00:00:00 2001
From: Brady Wetherington <bwetherington@grokability.com>
Date: Sun, 20 Feb 2022 12:22:18 -0800
Subject: [PATCH] Cors should respect the .env var for CORS domains

---
 config/cors.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/config/cors.php b/config/cors.php
index f09ab4979f..083ee30934 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -1,10 +1,14 @@
 <?php
 
+$allowed_origins = env('CORS_ALLOWED_ORIGINS') !== null ?
+    explode(',', env('CORS_ALLOWED_ORIGINS')) : [];
+
+
 return [
 
     'supportsCredentials' => false,
 
-    'allowedOrigins' => ['*'],
+    'allowedOrigins' => $allowed_origins,
 
     'allowedHeaders' => ['*'],