Added wildcard ACAO header to enable CORS for the web API.

lanmaster53 · Jun 9, 2020 · 553eb08 · 553eb08
1 parent f615cb8
commit 553eb08
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/REQUIREMENTS b/REQUIREMENTS
@@ -7,6 +7,7 @@ requests
 # web
 flask
 flask-restful
+flask-cors
 flasgger
 dicttoxml
 XlsxWriter

diff --git a/recon/core/web/__init__.py b/recon/core/web/__init__.py
@@ -1,4 +1,5 @@
 from flask import Flask, cli, render_template
+from flask_cors import CORS
 from flasgger import Swagger
 from recon.core import base
 from recon.core.constants import BANNER_WEB
@@ -41,6 +42,7 @@ def create_app():
     app = Flask(__name__, static_url_path='')
     app.config.from_object(__name__)
 
+    CORS(app)
     Swagger(app, template_file='definitions.yaml')
 
     app.redis = Redis.from_url(app.config['REDIS_URL'])