[ENG-3583] Respect cors_allowed_origins for backend HTTP requests

reflex-dev · Dec 12, 2024 · 6f8f9d5 · 6f8f9d5
1 parent 2d9849e
commit 6f8f9d5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/reflex/app.py b/reflex/app.py
@@ -436,7 +436,7 @@ def _add_cors(self):
             allow_credentials=True,
             allow_methods=["*"],
             allow_headers=["*"],
-            allow_origins=["*"],
+            allow_origins=get_config().cors_allowed_origins,
         )
 
     @property