allow only one domain

OWASP · Jan 24, 2025 · 3aeb5a8 · 3aeb5a8
1 parent 6f3cbfd
commit 3aeb5a8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cornucopia.owasp.org/script/headers.js b/cornucopia.owasp.org/script/headers.js
@@ -17,6 +17,7 @@ if (fs.existsSync(path.join(__dirname, '.vercel/output'))) {
 
 function main() {
   const headers = `/*
+  Access-Control-Allow-Origin: https://owaspcornucopia.org
   Cross-Origin-Embedder-Policy: require-corp
   Cross-Origin-Opener-Policy: same-origin
   X-Robots-Tag: noindex