CORS on Python/Flask

views.py

from flask import request, make_response,

def any_response(data):
  ALLOWED = ['http://localhost:8888']
  response = make_response(data)
  origin = request.headers['Origin']
  if origin in ALLOWED:
    response.headers['Access-Control-Allow-Origin'] = origin
  return response

gotta <3 flask

Shouldn't the Access-Control-Allow-Origin response header be always included when there's an Origin header in the request?

Thank you very much for posting this!

Thank you for posting this.

Thanks, this was a great time-saver!

New to the concept of access-control-allow-origin, what does data take in? I assume it's the URL requesting?