增加 跨域安全性

config/cors.php

@@ -1,5 +1,13 @@
 <?php
 
+$allowed_origins = [
+    '127.0.0.1'
+];
+
+// 从 config(app.url) 中获取域名
+$allowed_origins[] = parse_url(config('app.url'), PHP_URL_HOST);
+
+
 return [
 
     /*
@@ -19,7 +27,7 @@
 
     'allowed_methods' => ['*'],
 
-    'allowed_origins' => ['*'],
+    'allowed_origins' => $allowed_origins,
 
     'allowed_origins_patterns' => [],