alex/anki-connect
1
Fork 0
Code Releases 7 Activity

fix #130 - restrict cors to localhost

Browse Source
This commit is contained in:
Anderson Dadario 2019-12-20 13:56:39 +01:00
parent 9916eaa80f
commit 4059a452a7
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
AnkiConnect.py
View File

@ -39,6 +39,7 @@ from string import ascii_letters
API_VERSION = 6 API_VERSION = 6
API_LOG_PATH = None API_LOG_PATH = None
NET_CORS_ORIGIN = os.getenv('ANKICONNECT_CORS_ORIGIN', 'http://localhost')
NET_ADDRESS = os.getenv('ANKICONNECT_BIND_ADDRESS', '127.0.0.1') NET_ADDRESS = os.getenv('ANKICONNECT_BIND_ADDRESS', '127.0.0.1')
NET_BACKLOG = 5 NET_BACKLOG = 5
NET_PORT = 8765 NET_PORT = 8765
@ -199,7 +200,7 @@ class WebServer:
self.headers = [ self.headers = [
['HTTP/1.1 200 OK', None], ['HTTP/1.1 200 OK', None],
['Content-Type', 'text/json'], ['Content-Type', 'text/json'],
['Access-Control-Allow-Origin', '*'] ['Access-Control-Allow-Origin', NET_CORS_ORIGIN]
] ]
self.headersOpt = {} self.headersOpt = {}