diff --git a/src/ApiGateways/Web.Bff.Shopping/aggregator/Program.cs b/src/ApiGateways/Web.Bff.Shopping/aggregator/Program.cs
index 0babb8802..b50806c94 100644
--- a/src/ApiGateways/Web.Bff.Shopping/aggregator/Program.cs
+++ b/src/ApiGateways/Web.Bff.Shopping/aggregator/Program.cs
@@ -8,6 +8,7 @@ builder.Services.AddControllers();
 builder.Services.AddHealthChecks(builder.Configuration);
 builder.Services.AddCors(options =>
 {
+    // TODO: Read allowed origins from configuration
     options.AddPolicy("CorsPolicy",
         builder => builder
         .SetIsOriginAllowed((host) => true)