There is an recommendation, but it uses modifying Flowable source code, https://forum.flowable.org/t/flowable-task-process-api-cors-configuration/1085
Can’t we configure CORS for Flowable without touching Flowable Source Code?
Below is how others are doing.
https://docs.alfresco.com/process-services1.9/topics/enabling-cors.html