[ENG-3583] Respect cors_allowed_origins for backend HTTP requests (#4533)

masenf · web-flow · commit f4aea1b3abba · 2024-12-13T09:31:27.000-08:00
diff --git a/reflex/app.py b/reflex/app.py
@@ -436,7 +436,7 @@ def _add_cors(self):
             allow_credentials=True,
             allow_methods=["*"],
             allow_headers=["*"],
-            allow_origins=["*"],
+            allow_origins=get_config().cors_allowed_origins,
         )
 
     @property

Original file line number	Diff line number	Diff line change
`@@ -436,7 +436,7 @@ def _add_cors(self):`
`436`	`436`	`allow_credentials=True,`
`437`	`437`	`allow_methods=["*"],`
`438`	`438`	`allow_headers=["*"],`
`439`		`- allow_origins=["*"],`
	`439`	`+ allow_origins=get_config().cors_allowed_origins,`
`440`	`440`	`)`
`441`	`441`
`442`	`442`	`@property`