Optional. List of allowed origins (e.g., "https://example.com").
Default is often an empty list (no external origins). Use "*" only if you trust all origins, as that bypasses most restrictions.
Optional. A regex pattern for matching allowed origins, used if you have dynamic subdomains.
Example: "^https://.*.mycompany.com$"
Specifies Cross-Origin Resource Sharing (CORS) rules for your server.
If omitted, defaults are typically very restrictive (often no cross-origin requests). Configure carefully if you want to allow usage from browsers hosted on other domains.
