Allow CORS from all origins

[siunus]

Is there an existing issue for this?

• I have searched the existing issues

Current behavior

I am trying to allow CORS from all origins. I added CORS_ALLOWED_ORIGINS=* to the .env file, but the server fails to start when this variable is set.
Is there any way to allow CORS from all origins in this setup?

Steps to reproduce

1. Add CORS_ALLOWED_ORIGINS=* to the .env file.
2. Start the server.
3. Observe that the server failed to start, likely due to an issue with the CORS configuration.

Environment

Production

Browser

Google Chrome

Variant

Self-hosted

Version

v0.23.1

[akshat5302]

Hey @siunus, please leave the CORS_ALLOWED_ORIGINS blank instead of using * to allow all origins.