Address some issues raised by static analysis (#278)

- Better CORS restriction - Use resource integrity for jsTree
ibutsu · Jan 14, 2022 · af87998 · af87998
1 parent d9053b5
commit af87998
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/backend/ibutsu_server/__init__.py b/backend/ibutsu_server/__init__.py
@@ -104,7 +104,7 @@ def get_app(**extra_config):
         "openapi.yaml", arguments={"title": "Ibutsu"}, base_path="/api", pythonic_params=True
     )
 
-    CORS(app.app)
+    CORS(app.app, resources={r"/*": {"origins": "*", "send_wildcard": False}})
     db.init_app(app.app)
     bcrypt.init_app(app.app)
     Mail(app.app)

diff --git a/backend/ibutsu_server/templates/reports/exception-report.html b/backend/ibutsu_server/templates/reports/exception-report.html
diff --git a/backend/ibutsu_server/templates/reports/html-report.html b/backend/ibutsu_server/templates/reports/html-report.html