docs: add note about CORS headers applying only via dashboard

code-asher · code-asher · commit af4dba053001 · 2023-06-09T12:52:21.000-08:00
diff --git a/docs/networking/port-forwarding.md b/docs/networking/port-forwarding.md
@@ -97,8 +97,12 @@ You can read more on SSH port forwarding [here](https://www.ssh.com/academy/ssh/
 
 ## Cross-origin resource sharing (CORS)
 
-Coder automatically sets headers that allow requests between separately
-forwarded applications belonging to the same user.
+When forwarding via the dashboard, Coder automatically sets headers that allow
+requests between separately forwarded applications belonging to the same user.
+
+When forwarding through other methods the application itself will need to set
+its own CORS headers if they are being forwarded through different origins since
+Coder does not intercept these cases. See below for the required headers.
 
 ### Authentication
 
