Cors origin from env on config and defaults to allow all

hotosm · Feb 27, 2025 · a7e090a · a7e090a
1 parent 406e450
commit a7e090a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/config.py b/backend/config.py
@@ -26,7 +26,7 @@ class Config:
     APP_NAME: str = "Tasking Manager"
     DEBUG: bool = False
     PROFILING: bool = os.getenv("PROFILING", False)
-    EXTRA_CORS_ORIGINS: list = []
+    EXTRA_CORS_ORIGINS: list = os.getenv("EXTRA_CORS_ORIGINS", "").split(",") if os.getenv("EXTRA_CORS_ORIGINS") else ["*"]
 
     # The base url the application is reachable
     APP_BASE_URL: str = os.getenv("TM_APP_BASE_URL", "http://127.0.0.1:5000/").rstrip(