From 595034b87ba86f44f4eb3e5fb67f1d3dd579bf44 Mon Sep 17 00:00:00 2001
From: Aravinth Manivannan <realaravinth@batsense.net>
Date: Mon, 18 Sep 2023 19:04:30 +0530
Subject: [PATCH] feat: document CORS headache

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 README.md

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..f35cbc2
--- /dev/null
+++ b/README.md
@@ -0,0 +1,8 @@
+Requires your Forgejo instance admin to enable CORS for at least the
+origin which serves the notification panel. Please see
+[here](https://forgejo.org/docs/latest/admin/config-cheat-sheet/#cors-cors)
+for more information.
+
+NOTE: The test [forgejo configuration](./integration/conf/app.ini) may
+be insecure for your usecase since it allows CORS for all origins with
+the widest possible surface.