search

in-fin-neat / in-fin-neat-core

Personal Finances tool
1 stars 0 forks source link

Adding configuration for CORS domain in API response #51

Closed diegotsutsumi closed 1 day ago

diegotsutsumi commented 2 weeks ago

We're allowing all domains as our CORS policy, that's not a safe strategy and browsers would complain about that.

This PR adds a simple single origin answer for CORs policy. A multi-origin logic would need an extra auth layer checking domins (more here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin)

diegotsutsumi commented 1 day ago

Closing as ithere were conflicts with https://github.com/in-fin-neat/in-fin-neat-core/pull/50 and we addressed there