// Copyright 2019 The Gitea Authors. All rights reserved.// SPDX-License-Identifier: MIT package setting import (	"time") // CORSConfig defines CORS settingsvar CORSConfig = struct {	Enabled          bool	AllowDomain      []string // FIXME: this option is from legacy code, it actually works as "AllowedOrigins". When refactoring in the future, the config option should also be renamed together.	Methods          []string	MaxAge           time.Duration	AllowCredentials bool	Headers          []string	XFrameOptions    string}{	AllowDomain:   []string{"*"},	Methods:       []string{"GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},	Headers:       []string{"Content-Type", "User-Agent"},	MaxAge:        10 * time.Minute,	XFrameOptions: "SAMEORIGIN",} func loadCorsFrom(rootCfg ConfigProvider) {	mustMapSetting(rootCfg, "cors", &CORSConfig)}