Adding a security suggestion for CORS configuration in production environments