From faea1759cf8e2c4bb44f9682adf8405b273a103f Mon Sep 17 00:00:00 2001
From: parsa aghaei
Date: Tue, 23 Jun 2026 18:05:27 +0330
Subject: [PATCH] 0.2: restrict CORS allowed_origins to FRONTEND_URL
---
config/cors.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config/cors.php b/config/cors.php
index 94f07be..3b0f92d 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -19,7 +19,7 @@
'allowed_methods' => ['*'],
- 'allowed_origins' => ['*'],
+ 'allowed_origins' => [env('FRONTEND_URL', 'https://parsaaghayi.ir')],
'allowed_origins_patterns' => [],