Merge pull request 'security: remove localhost origins from CORS allowed list' (#48) from feature/meetings into main

Reviewed-on: https://gitea.blackbusinesslabs.com/ATTUNE-HEART-THERAPY/alternative-backend-service/pulls/48
This commit is contained in:
Saani 2025-11-28 10:51:28 +00:00
commit 10d2e7ff13

View File

@ -16,8 +16,6 @@ ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
# CORS Configuration # CORS Configuration
CORS_ALLOWED_ORIGINS = [ CORS_ALLOWED_ORIGINS = [
'http://localhost:3000',
'http://127.0.0.1:3000',
'https://attunehearttherapy.com' 'https://attunehearttherapy.com'
] ]