From b62f847ffad5b7279536eee4c526dbd24f932c46 Mon Sep 17 00:00:00 2001
From: Ruslan Talpa <ruslan.talpa@databricks.com>
Date: Thu, 31 Jul 2025 16:38:48 +0300
Subject: [PATCH] add fixme comment related to cache and allow: *  in cors
 requests

---
 proxy/src/serverless/rest.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/proxy/src/serverless/rest.rs b/proxy/src/serverless/rest.rs
index 1ce038e210..a63f29942c 100644
--- a/proxy/src/serverless/rest.rs
+++ b/proxy/src/serverless/rest.rs
@@ -754,6 +754,8 @@ fn apply_common_cors_headers(
                 None
             }
         }
+        // FIXME!: on the first request, when we don't have a cached entry for the config,
+        // allowed_origins is None, so we allow all origins for now but we should fix this
         (Some(_), None) => Some(HEADER_VALUE_ALLOW_ALL_ORIGINS),
         _ => None,
     };