From 00d602cc38296cfa66d166aa6f87517eb0a94fc4 Mon Sep 17 00:00:00 2001
From: hueso <root@localhost>
Date: Thu, 29 Oct 2026 20:25:43 -0300
Subject: [PATCH] add CORS origins

---
 bbpay.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bbpay.ts b/bbpay.ts
index 7296343..8b91090 100644
--- a/bbpay.ts
+++ b/bbpay.ts
@@ -18,7 +18,7 @@ const primus = new Primus(config.primus, (...args) => log.info(...args));
 const cache = new ProofCache();
 
 const app = express();
-app.use(cors());
+app.use(cors({ origin: /^https?:\/\/(([a-z0-9-]+\.)*demo\.)?p2pix\.co$/ }));
 app.use(express.json());
 /** Only what the caller actually sent; empty sections stay out of the line. */
 const received = (req: Request): Record<string, unknown> =>