add enable unsafe cors flag (#995)

server/flags/flags.go

@@ -24,9 +24,10 @@ const (
 	GRPCWebAddress = "grpc-web.address"
 )
 
-// RPCEnable Defines if Cosmos-sdk REST server should be enabled
+// Cosmos API flags
 const (
-	RPCEnable = "api.enable"
+	RPCEnable         = "api.enable"
+	EnabledUnsafeCors = "api.enabled-unsafe-cors"
 )
 
 // JSON-RPC flags

server/start.go

@@ -150,6 +150,7 @@ which accepts a path for the resulting pprof file.
 	cmd.Flags().String(srvflags.GRPCWebAddress, serverconfig.DefaultGRPCWebAddress, "The gRPC-Web server address to listen on")
 
 	cmd.Flags().Bool(srvflags.RPCEnable, false, "Defines if Cosmos-sdk REST server should be enabled")
+	cmd.Flags().Bool(srvflags.EnabledUnsafeCors, false, "Defines if CORS should be enabled (unsafe - use it at your own risk)")
 
 	cmd.Flags().Bool(srvflags.JSONRPCEnable, true, "Define if the gRPC server should be enabled")
 	cmd.Flags().StringSlice(srvflags.JSONRPCAPI, config.GetDefaultAPINamespaces(), "Defines a list of JSON-RPC namespaces that should be enabled")