security: remove localhost origins from CORS allowed list #48
@ -16,8 +16,6 @@ ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
|
||||
|
||||
# CORS Configuration
|
||||
CORS_ALLOWED_ORIGINS = [
|
||||
'http://localhost:3000',
|
||||
'http://127.0.0.1:3000',
|
||||
'https://attunehearttherapy.com'
|
||||
]
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user