From d5a9e8ed0fea8b25545939e6a787b615a4a7e009 Mon Sep 17 00:00:00 2001
From: Christian Richter <1058116+dragonchaser@users.noreply.github.com>
Date: Wed, 20 Mar 2024 13:44:16 +0000
Subject: [PATCH] Automated changelog update [skip ci]

---
 CHANGELOG.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c6a1800b5..8b7a1d4bc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -56,6 +56,7 @@ The following sections list the changes for unreleased.
 * Enhancement - Introduce staticroutes package & remove well-known OIDC middleware: [#6095](https://github.com/owncloud/ocis/issues/6095)
 * Enhancement - Graphs endpoint for mounting and unmounting shares: [#7885](https://github.com/owncloud/ocis/pull/7885)
 * Enhancement - Add epub reader to web default apps: [#8410](https://github.com/owncloud/ocis/pull/8410)
+* Enhancement - Change Cors default settings: [#8518](https://github.com/owncloud/ocis/pull/8518)
 * Enhancement - Custom WEB App Loading: [#8523](https://github.com/owncloud/ocis/pull/8523)
 * Enhancement - Update to go 1.22: [#8586](https://github.com/owncloud/ocis/pull/8586)
 * Enhancement - Send more sse events: [#8587](https://github.com/owncloud/ocis/pull/8587)
@@ -174,6 +175,15 @@ The following sections list the changes for unreleased.
 
    https://github.com/owncloud/ocis/pull/8410
 
+* Enhancement - Change Cors default settings: [#8518](https://github.com/owncloud/ocis/pull/8518)
+
+   We have changed the default CORS settings to set `Access-Control-Allow-Origin`
+   to the `OCIS_URL` if not explicitely set and `Access-Control-Allow-Credentials`
+   to `false` if not explicitely set.
+
+   https://github.com/owncloud/ocis/issues/8514
+   https://github.com/owncloud/ocis/pull/8518
+
 * Enhancement - Custom WEB App Loading: [#8523](https://github.com/owncloud/ocis/pull/8523)
 
    We've added a new feature which allows the administrator of the environment to