docs(HTTP): Add proper docs for CORS attribute

Signed-off-by: provokateurin <[email protected]>
nextcloud · Jan 9, 2025 · d64c72b · d64c72b
1 parent 353866f
commit d64c72b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/public/AppFramework/Http/Attribute/CORS.php b/lib/public/AppFramework/Http/Attribute/CORS.php
@@ -28,7 +28,9 @@
 use Attribute;
 
 /**
- * Attribute for controller methods that can also be accessed by not logged-in user
+ * Attribute for controller methods that can also be accessed by other websites.
+ * See https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS for an explanation of the functionality and the security implications.
+ * See https://docs.nextcloud.com/server/latest/developer_manual/digging_deeper/rest_apis.html on how to implement it in your controller.
  *
  * @since 27.0.0
  */