From d0a3951689617765f8ce4b8b674a3b7b5e6b7312 Mon Sep 17 00:00:00 2001
From: Jose Olarte III <jose.anomalist.design@gmail.com>
Date: Thu, 3 Sep 2026 21:12:59 +0800
Subject: [PATCH] Allow the ngrok browser-warning skip header in CORS so a
 WebView can reach the local tunnel without failing preflight.

---
 src/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/index.ts b/src/index.ts
index 1ddeac7..c6c1934 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -14,7 +14,7 @@ app.use(
   cors({
     origin: true,
     methods: ["GET", "POST", "PUT", "OPTIONS"],
-    allowedHeaders: ["Content-Type", "Authorization"],
+    allowedHeaders: ["Content-Type", "Authorization", "ngrok-skip-browser-warning"],
   }),
 );