Whitelisting URLs using CORs

I have been trying to add a URL (https://abc.com/in/Test) in the CORS parameter while starting the RASA server so that it could be only accessible from that URL. But somehow it is allowing all the URLs to access the APIs. And if I am adding only the base URL(https://abc.com/) then it does not allow me to communicate with the API.

I am using rasa 1.10.1 with docker.

And command which I am using is: CMD [“run”,"-m","/app/models","–enable-api","–cors",“https://training.prod.unwomen.org/en/test/india","--debug” ,"–endpoints", “endpoints.yml”,"–debug"]

@amn41

You should do this with a reverse proxy like nginx or traefik.