Merge pull request #3070 from bitzesty/allow-cors-array-production

Allow to pass multiple origins for cross site requests [PRODUCTION]

config/application.rb

@@ -23,7 +23,7 @@ class Application < Rails::Application
     if ENV["CORS_HOST"].present?
       config.middleware.insert_before 0, Rack::Cors do
         allow do
-          origins ENV["CORS_HOST"] || "*"
+          origins(*(ENV["CORS_HOST"] || "*").split(","))
           resource "*",
             headers: :any,
             methods: %i[get options]