[Docs] Document the CORS configuration change that is required to the CVE fix in CORS as breaking change

== Stricter CORS filter for same-origin requests With this update, the Vert.x cross-origin resource sharing (CORS) filter, Vert.x HTTP CORS, is stricter and denies same-origin requests when the filter has not been explicitly configured to accept such origins. For example, if you host a {ProductName} application on ` https://my.org ` that includes an HTML page, which contains JavaScript that posts updates back to ` https://my.org `, you need to apply the following configuration in the `application.properties` file to allow same-origin requests: ---- quarkus.http.cors=true quarkus.http.cors.origins= https://my.org ---- Before this update, configuring the Vert.x HTTP CORS filter to allow the same host origins was not necessary.