security: remove localhost origins from CORS allowed list #48
@ -16,8 +16,6 @@ ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
|
|||||||
|
|
||||||
# CORS Configuration
|
# CORS Configuration
|
||||||
CORS_ALLOWED_ORIGINS = [
|
CORS_ALLOWED_ORIGINS = [
|
||||||
'http://localhost:3000',
|
|
||||||
'http://127.0.0.1:3000',
|
|
||||||
'https://attunehearttherapy.com'
|
'https://attunehearttherapy.com'
|
||||||
]
|
]
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user