diff --git a/DbFirst.API/Program.cs b/DbFirst.API/Program.cs
index cfb6fc7..07ce535 100644
--- a/DbFirst.API/Program.cs
+++ b/DbFirst.API/Program.cs
@@ -13,6 +13,7 @@ builder.Services.AddControllers();
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen();
 
+// TODO: allow listed origins configured in appsettings.json
 builder.Services.AddCors(options =>
 {
     options.AddDefaultPolicy(policy =>