Fix incorrect CORS default values (#24206) (#24217)

Backport #24206 by @wxiaoguang

Document:

```
;ALLOW_DOMAIN = *
;METHODS = GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS
```

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

diff --git a/modules/setting/cors.go b/modules/setting/cors.go
index 260848b5df33c65903b0d63d5df311bde027945f..bafbbab64f990078c15ff8e955528c9d847849f7 100644 (file)
--- a/modules/setting/cors.go
+++ b/modules/setting/cors.go
@@ -21,9 +21,10 @@ var CORSConfig = struct {
        Headers          []string
        XFrameOptions    string
 }{
-       Enabled:       false,
-       MaxAge:        10 * time.Minute,
+       AllowDomain:   []string{"*"},
+       Methods:       []string{"GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},
        Headers:       []string{"Content-Type", "User-Agent"},
+       MaxAge:        10 * time.Minute,
        XFrameOptions: "SAMEORIGIN",
 }