feat: document CORS headache

This commit is contained in:
Aravinth Manivannan 2023-09-18 19:04:30 +05:30
parent 4ff435c056
commit 595034b87b
Signed by: realaravinth
GPG key ID: F8F50389936984FF

8
README.md Normal file
View file

@ -0,0 +1,8 @@
Requires your Forgejo instance admin to enable CORS for at least the
origin which serves the notification panel. Please see
[here](https://forgejo.org/docs/latest/admin/config-cheat-sheet/#cors-cors)
for more information.
NOTE: The test [forgejo configuration](./integration/conf/app.ini) may
be insecure for your usecase since it allows CORS for all origins with
the widest possible surface.