Merge pull request #3640 from MTES-MCT/feature/3563-handle-cors

[Sécurité - Audit] Absence de restriction CORS
MTES-MCT · Feb 3, 2025 · 439c9c2 · 439c9c2
2 parents 84652d3 + c398909
commit 439c9c2
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/.scalingo/nginx/server.location b/.scalingo/nginx/server.location
@@ -9,7 +9,6 @@ add_header Cross-Origin-Opener-Policy "same-origin";
 add_header Cross-Origin-Resource-Policy "cross-origin";
 add_header Upgrade-Insecure-Requests "1";
 add_header X-Powered-By "none";
-add_header Access-Control-Allow-Origin "*";
 add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
 add_header Access-Control-Allow-Headers "Content-Type, Authorization";