Restrict overly permissive CORS allow_methods in backend/app/main.py.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-23 14:36:57 +00:00
parent 63bc8529d5
commit a9c2d37336
1 changed files with 1 additions and 1 deletions
@@ -66,7 +66,7 @@ def create_application() -> FastAPI:
        CORSMiddleware,
        allow_origins=settings.CORS_ORIGINS,
        allow_credentials=True,
-        allow_methods=["*"],
+        allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
        allow_headers=["*"],
    )