ok - submitted a bug - will see. CORS origin can't be set in middleware.js in 4.22.0 · Issue #20033 · strapi/strapi · GitHub