Feature Request: Allow to change Access-Control-Allow-Origin header in callable functions

[takaaa220]

I want to specify some origins for Access-Control-Allow-Origin header in callable functions to improve security as follows.

exports.newPost = functions
  .runWith({ allowOrigins: ["https://example.com", "https://sub.example.com"] })
  .onCall((data, context) => {
    // ...
  });

[google-oss-bot]

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

[inlined]

Thanks for the idea. We will look into it.