Merge branch 'master' of https://github.com/nestjs/docs.nestjs.com

Author: kamilmysliwiec

content/security/cors.md

@@ -21,18 +21,3 @@ Or, pass a [CORS configuration object](https://github.com/expressjs/cors#configu
 const app = await NestFactory.create(AppModule, { cors: true });
 await app.listen(3000);
 ```
-
-Above method only applies to REST endpoints.
-
-To enable CORS in GraphQL, set `cors` property to `true` or pass [CORS configuration object](https://github.com/expressjs/cors#configuration-options) or a [callback function](https://github.com/expressjs/cors#configuring-cors-asynchronously) as the `cors` property value when you import GraphQL module.
-
-> warning **Warning** `CorsOptionsDelegate` solution is not working with the `apollo-server-fastify` package yet.
-
-```typescript
-GraphQLModule.forRoot({
-  cors: {
-    origin: 'http://localhost:3000',
-    credentials: true,
-  },
-}),
-```

content/techniques/serialization.md

@@ -6,6 +6,8 @@ Serialization is a process that happens before objects are returned in a network
 
 Nest provides a built-in capability to help ensure that these operations can be performed in a straightforward way. The `ClassSerializerInterceptor` interceptor uses the powerful [class-transformer](https://github.com/typestack/class-transformer) package to provide a declarative and extensible way of transforming objects. The basic operation it performs is to take the value returned by a method handler and apply the `instanceToPlain()` function from [class-transformer](https://github.com/typestack/class-transformer). In doing so, it can apply rules expressed by `class-transformer` decorators on an entity/DTO class, as described below.
 
+> info **Hint** The serialization does not apply to [StreamableFile](https://docs.nestjs.com/techniques/streaming-files#streamable-file-class) responses.
+
 #### Exclude properties
 
 Let's assume that we want to automatically exclude a `password` property from a user entity. We annotate the entity as follows: