Add defaults for CORS related django settings that can be overwritten.

playbooks/roles/edxapp/defaults/main.yml

@@ -164,6 +164,7 @@ EDXAPP_FEATURES:
   ENABLE_VIDEO_UPLOAD_PIPELINE: false
   ENABLE_DISCUSSION_HOME_PANEL: true
   ENABLE_COMBINED_LOGIN_REGISTRATION: true
+  ENABLE_CORS_HEADERS: false
 
 EDXAPP_BOOK_URL: ""
 # This needs to be set to localhost
@@ -411,6 +412,8 @@ EDXAPP_VIDEO_UPLOAD_PIPELINE:
   BUCKET: ''
   ROOT_PATH: ''
 
+EDXAPP_CORS_ORIGIN_WHITELIST: []
+
 #-------- Everything below this line is internal to the role ------------
 
 #Use YAML references (& and *) and hash merge <<: to factor out shared settings
@@ -601,6 +604,7 @@ generic_cache_config: &default_generic_cache
   LOCATION: "{{ EDXAPP_MEMCACHE }}"
 
 generic_env_config:  &edxapp_generic_env
+  CORS_ORIGIN_WHITELIST: "{{ EDXAPP_CORS_ORIGIN_WHITELIST }}"
   VIDEO_UPLOAD_PIPELINE: "{{ EDXAPP_VIDEO_UPLOAD_PIPELINE }}"
   DEPRECATED_ADVANCED_COMPONENT_TYPES: "{{ EDXAPP_DEPRECATED_ADVANCED_COMPONENT_TYPES }}"
   OAUTH_OIDC_ISSUER: "https://{{ EDXAPP_LMS_BASE }}/oauth2"