check origins again...

opendp · Aug 21, 2023 · 111dbf7 · 111dbf7
1 parent 4269029
commit 111dbf7
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/server/opendp_project/settings/azure_test_01.py b/server/opendp_project/settings/azure_test_01.py
@@ -7,9 +7,9 @@
 ASGI_APPLICATION = "opendp_project.asgi_azure.application"
 
 # to test...
-CORS_ALLOW_ALL_ORIGINS = True
+CORS_ALLOWED_ORIGINS = False
 
-#CORS_ALLOWED_ORIGINS = os.getenv('TRUSTED_ORIGINS', "TRUSTED_ORIGINS_ENV_VAR_MISSING").split(',')
+CORS_ALLOWED_ORIGINS = os.getenv('TRUSTED_ORIGINS', "TRUSTED_ORIGINS_ENV_VAR_MISSING").split(',')
 CSRF_TRUSTED_ORIGINS = os.getenv('TRUSTED_ORIGINS', "TRUSTED_ORIGINS_ENV_VAR_MISSING").split(',')
 
 # Let nginx serve static files

diff --git a/server/opendp_project/settings/base.py b/server/opendp_project/settings/base.py
@@ -268,7 +268,7 @@ def RELEASE_FILE_STORAGE():
 DEFAULT_ALLOWED_HOSTS = '0.0.0.0,127.0.0.1,localhost,server'
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', DEFAULT_ALLOWED_HOSTS).split(',')
 
-CORS_ORIGIN_ALLOW_ALL = False
+CORS_ALLOWED_ORIGINS = False
 
 CORS_ALLOWED_ORIGINS = (
     # 'http://localhost:8000',