From b27717b260d0800a0c00ce112b175d3fa63ce83d Mon Sep 17 00:00:00 2001
From: Eric Zarko <eric@zarko.org>
Date: Mon, 25 Oct 2021 16:49:53 -0700
Subject: [PATCH] Update process-response.js

Change to using environment variable CORS_ORIGIN instead of a hard coded '*'.
---
 src/process-response.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/process-response.js b/src/process-response.js
index 4ed7f66..18bec72 100644
--- a/src/process-response.js
+++ b/src/process-response.js
@@ -5,7 +5,7 @@ module.exports = (isCors, body, statusCode) => {
     Object.assign(headers, {
       'Access-Control-Allow-Headers': 'Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token',
       'Access-Control-Allow-Methods': 'OPTIONS,POST',
-      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Origin': process.env.CORS_ORIGIN,
       'Access-Control-Max-Age': '86400'
     });
   }