diff --git a/src/Middleware.jl b/src/Middleware.jl
index 9d3e689..bc198a1 100644
--- a/src/Middleware.jl
+++ b/src/Middleware.jl
@@ -3,6 +3,7 @@ using HTTP
 using Dates
 using JSON
 
+# TODO tighten restrictions
 const CORS_HEADERS = [
     "Access-Control-Allow-Origin" => "*",
     "Access-Control-Allow-Headers" => "*",