fix CORS in dev env

config/packages/nelmio_cors.yaml

@@ -1,7 +1,7 @@
 nelmio_cors:
   defaults:
     origin_regex: true
-    allow_origin: [ '*' ]
+    allow_origin: [ '%env(CORS_ALLOW_ORIGIN)%' ] # you can test locally with this value '^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
     allow_methods: [ 'GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE' ]
     allow_headers: [ '*' ]
     expose_headers: [ 'Authorization' ]