apunkt/dograh
1
0
Fork 0
mirror of https://github.com/dograh-hq/dograh.git synced 2026-06-19 08:28:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

fix: harden CORS origin allow list

Browse source 
Fixes #322
This commit is contained in:
Abhishek Kumar 2026-05-27 15:36:48 +05:30
parent 6d78537297
commit 6f79bd67eb
5 changed files with 38 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

3
api/constants.py
View file

@ -26,6 +26,9 @@ DATABASE_URL = os.environ["DATABASE_URL"]
REDIS_URL = os.environ["REDIS_URL"]
DEPLOYMENT_MODE = os.getenv("DEPLOYMENT_MODE", "oss")
CORS_ALLOWED_ORIGINS = [
o.strip() for o in os.getenv("CORS_ALLOWED_ORIGINS", "").split(",") if o.strip()
]
AUTH_PROVIDER = os.getenv("AUTH_PROVIDER", "local")
DOGRAH_MPS_SECRET_KEY = os.getenv("DOGRAH_MPS_SECRET_KEY", None)
MPS_API_URL = os.getenv("MPS_API_URL", "https://services.dograh.com")