Vite CORS changes

[s2b]

Recent changes in vite enabled CORS by default. Currently, there is no way to disable it without specifying it in a configuration file. Since this add-on doesn't and shouldn't include a vite config (this is the responsibility of the project), this might decrease the developer experience.

Issue in vite tracker: vitejs/vite#19263

[rfay]

Related:

• docs: add server.cors option for Vite (security) ddev/ddev.com#311

[s2b]

It's probably not a good idea to re-allow CORS from all domains by setting --cors in ddev vite. Since it's not possible to limit CORS headers to specific URIs via CLI options, that configuration can't be the responsibility of this add-on and needs to be configured in vite config by the user.