Remove nonexistent PHP 8.5 constraint, restrict CORS allowed_headers

composer.json

@@ -10,7 +10,7 @@
   ],
   "license": "MIT",
   "require": {
-    "php": "^8.1|^8.2|^8.3|^8.4|^8.5",
+    "php": "^8.1|^8.2|^8.3|^8.4",
     "ext-sockets": "*",
     "doctrine/dbal": "^4.0",
     "filament/filament": "^5.0",

config/cors.php

@@ -25,7 +25,7 @@ return [
 
     'allowed_origins_patterns' => [],
 
-    'allowed_headers' => ['*'],
+    'allowed_headers' => ['Content-Type', 'X-Requested-With', 'Authorization', 'X-XSRF-TOKEN'],
 
     'exposed_headers' => [],