尽管设置了 DISCOURSE_ENABLE_CORS: true，但没有出现 'Access-Control-Allow-Origin' 标头

[IAmGav (Gavin Perch)]

cors origins setting is controlled in admin > settings > security

you only need DISCOURSE_ENABLE_CORS: in your app.yml