docs(readme): update example (#206)

fastify · May 29, 2022 · 0c6c8b2 · 0c6c8b2
1 parent 7b1ee06
commit 0c6c8b2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -70,11 +70,12 @@ const fastify = require('fastify')()
 fastify.register(require('@fastify/cors'), (instance) => {
   return (req, callback) => {
     const corsOptions = {
+      // This is NOT recommended for production as it enables reflection exploits
       origin: true
     };
 
     // do not include CORS headers for requests from localhost
-    if (/localhost/.test(req.headers.origin)) {
+    if (/^localhost$/m.test(req.headers.origin)) {
       corsOptions.origin = false
     }