diff --git a/Security-Configuration.md b/Security-Configuration.md
index 8b28d95..7e68c01 100644
--- a/Security-Configuration.md
+++ b/Security-Configuration.md
@@ -11,6 +11,11 @@ $ weed scaffold -config=security
 #    /etc/seaweedfs/security.toml
 # this file is read by master, volume server, and filer
 
+# comma separated origins allowed to make requests to the filer and s3 gateway. 
+# enter in this format: https://domain.com, or http://localhost:port
+[cors.allowed_origins]
+values = "*"
+
 # this jwt signing key is read by master and volume server, and it is used for write operations:
 # - the Master server generates the JWT, which can be used to write a certain file on a volume server
 # - the Volume server validates the JWT on writing