[LMS-2654] add 'trusted-cross-origin-domains' property to screening dist.

SVN: 23679

screening/dist/server/service.properties

@@ -82,3 +82,20 @@ core-plugins-folder=./webapps/openbis/core-plugins
 # When set to "true" enables the system to store material codes containing non-alphanumeric characters.
 # Regardless of the value of this property no white spaces are allowed in the material codes.
 #material-relax-code-constraints=false
+
+# A comma-separated list of trusted cross-origin domains, that are allowed to
+# query openBIS content. Typically these are lightweight webapps that integrate with openBIS 
+# via JSON-RPC services, but are not directly hosted within the openBIS application.
+# 
+# Example 1 (two different domains configured):
+# 
+# trusted-cross-origin-domains=https://myapp.domain.com:8443, http://other.domain.com
+#
+# Example 2 (match every domain):
+#
+# trusted-cross-origin-domains= *
+#
+# The '*' matches any arbitrary domain. It should be used with care as it opens openBIS 
+# for potential cross-site scripting attacks.
+#
+#trusted-cross-origin-domains=