Merge pull request #17066 from rgacogne/ddist-disable-cross-origin-requests-by-default

dnsdist: Disable cross-origin HTTP requests by default

diff --cc pdns/dnsdistdist/dnsdist-configuration.hh
Simple merge

diff --cc pdns/dnsdistdist/dnsdist-lua.cc
Simple merge

diff --cc pdns/dnsdistdist/dnsdist-settings-definitions.yml
Simple merge

diff --cc pdns/dnsdistdist/docs/reference/config.rst
Simple merge

diff --cc pdns/dnsdistdist/docs/upgrade_guide.rst
index 3eb57d8c02c93639ac2468e88957baceb407756c,c8b522afdbf84edb4fa7c8c139d49c0bc214658a..74d98fafd3b47314f71d1fa7fd2bcc16e958352b
--- 1/pdns/dnsdistdist/docs/upgrade_guide.rst
--- 2/pdns/dnsdistdist/docs/upgrade_guide.rst
+++ b/pdns/dnsdistdist/docs/upgrade_guide.rst
@@@ -34,8 -13,10 +34,10 @@@ support HTTP/2, but might be one in set
  
  Structured logging is now enabled by default, and can be disabled via :func:`setStructuredLogging` or the ``--structured-logging`` command-line switch.
  
 -:program:`dnsdist` now looks by default for a configuration file named ``dnsdist.yml`` in the system configuration directory (determined by the ``SYSCONFDIR`` variable during compilation), instead of ``dnsdist.conf``.
 +:program:`dnsdist` now looks by default for a configuration file named ``dnsdist.yml`` in the system configuration directory (determined by the ``SYSCONFDIR`` variable during compilation), instead of ``dnsdist.conf``. Please be aware that if a file named ``dnsdist.lua`` is present in the system configuration directory, it will also be loaded but without the ability to use configuration directives. Please see :doc:`the YAML settings reference <reference/yaml-settings>` for more information.
  
+ The webserver no longer allows cross-origin HTTP requests by default, please have a look at ``webserver.allow_cross_origin_requests`` (:func:`setWebserverConfig`'s ``allowCrossOriginRequests`` for Lua-based configurations) if your setup requires them.
+ 
  1.9.x to 2.0.0
  --------------