From 458a8838108ffc3d43ee9add89fda5fbbf9126a6 Mon Sep 17 00:00:00 2001
From: Thanakorn S <ts_nok@hotmail.com>
Date: Wed, 27 May 2026 11:26:40 +0700
Subject: [PATCH] CORS whitelist for NodeJS

---
 nodejs/server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nodejs/server.js b/nodejs/server.js
index 4bfbb02..2852e07 100644
--- a/nodejs/server.js
+++ b/nodejs/server.js
@@ -7,7 +7,7 @@ const { Server } = require('socket.io');
 const app        = express();
 const httpServer = createServer(app);
 const io         = new Server(httpServer, {
-    cors: { origin: '*' }
+    cors: { origin: process.env.ALLOWED_ORIGIN || 'http://localhost' }
 });
 
 app.use(express.json());