feat: CORS_ALLOWED_ORIGINS configurable via environment variable (#10355)

Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
This commit is contained in:
Zakir Jiwani
2026-03-17 04:55:06 -04:00
committed by GitHub
parent 712da2cf98
commit 887a20f06e
2 changed files with 8 additions and 0 deletions

View File

@@ -4,6 +4,10 @@ All notable changes to the **Prowler API** are documented in this file.
## [1.22.0] (Prowler UNRELEASED)
### 🚀 Added
- `CORS_ALLOWED_ORIGINS` configurable via environment variable [(#10355)](https://github.com/prowler-cloud/prowler/pull/10355)
### 🔄 Changed
- Attack Paths: Complete migration to private graph labels and properties, removing deprecated dual-write support [(#10268)](https://github.com/prowler-cloud/prowler/pull/10268)

View File

@@ -3,6 +3,10 @@ from config.env import env
DEBUG = env.bool("DJANGO_DEBUG", default=False)
ALLOWED_HOSTS = env.list("DJANGO_ALLOWED_HOSTS", default=["localhost", "127.0.0.1"])
CORS_ALLOWED_ORIGINS = env.list(
"DJANGO_CORS_ALLOWED_ORIGINS",
default=["http://localhost", "http://127.0.0.1"],
)
# Database
# TODO Use Django database routers https://docs.djangoproject.com/en/5.0/topics/db/multi-db/#automatic-database-routing