[ENG-3583] Respect cors_allowed_origins for backend HTTP requests (#4533)

2024-12-13 09:31:27 -08:00 · 2024-12-13 09:31:27 -08:00 · f4aea1b3ab
commit f4aea1b3ab
parent 7208540855
1 changed files with 1 additions and 1 deletions
--- a/reflex/app.py
+++ b/reflex/app.py
@ -436,7 +436,7 @@ class App(MiddlewareMixin, LifespanMixin):
            allow_credentials=True,
            allow_methods=["*"],
            allow_headers=["*"],
-            allow_origins=["*"],
+            allow_origins=get_config().cors_allowed_origins,
        )

    @property