diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7cff28b6d..57c15c13a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ All notable changes to this project will be documented in this file.
 - Make Sonoff L1 MusicSync persistent (#12008)
 - Relax NTP poll if no ntpserver can be resolved by DNS
 - Move firmware binaries to https://github.com/arendst/Tasmota-firmware/tree/main/release-firmware
+- Default disable CORS for enhanced security and provide user compile option ``#define USE_CORS`` (#12827)
 
 ### Fixed
 - Neopool communication error (#12813)
diff --git a/RELEASENOTES.md b/RELEASENOTES.md
index c9868e41d..5ad7a6e5b 100644
--- a/RELEASENOTES.md
+++ b/RELEASENOTES.md
@@ -137,6 +137,7 @@ The latter links can be used for OTA upgrades too like ``OtaUrl http://ota.tasmo
 - Allow buttons to work in AP normal mode [#12518](https://github.com/arendst/Tasmota/issues/12518)
 - Enable Ping and rule features for any device compiled with more than 1M flash size [#12539](https://github.com/arendst/Tasmota/issues/12539)
 - Replace spaces by hyphens in final hostname [#12710](https://github.com/arendst/Tasmota/issues/12710)
+- Default disable CORS for enhanced security and provide user compile option ``#define USE_CORS`` [#12827](https://github.com/arendst/Tasmota/issues/12827)
 
 ### Fixed
 - ESP32 core v2.0.0 setting hostname