Limit graphql server to localhost & *.httptoolkit.tech with CORS

Author: pimterry

src/httptoolkit-server.ts

@@ -149,7 +149,10 @@ export class HttpToolkitServer extends events.EventEmitter {
             // Hacky solution that lets us limit the server to only localhost,
             // and override the port from 4000 to something less likely to conflict.
             port: { port: 45457, host: 'localhost' },
-            playground: false
+            playground: false,
+            cors: {
+                origin: [/https?:\/\/localhost(:\d+)?$/, /\.httptoolkit\.tech$/]
+            }
         });
     }
 };