Set CORS allowAnyOrigin to false by default
"myaccount.session.params.sessionRefreshTimeOut": 300,
"myaccount.session.params.checkSessionInterval": 3,
"cors.allow_generic_http_requests": true,
- "cors.allow_any_origin": true,
+ "cors.allow_any_origin": false,
"cors.allowed_origins": [],
"cors.allow_subdomains": false,
"cors.supported_methods": [
