johanleroy/ENI-projet-piscine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(backend): corrige la justification du CORP same-origin (no-cors, pas d'ingress)
Airflow / Construction de l'image (push) Successful in 1m17s
Details
Backend / Tests exigeant une base (push) Failing after 4m50s
Details
Backend / Analyse statique de sécurité (push) Successful in 7s
Details
Airflow / Lint et intégrité des DAGs (push) Successful in 9m34s
Details
Backend / Audit des dépendances (push) Successful in 9m36s
Details
Backend / Lint, typage et tests (push) Successful in 10m7s
Details
SonarQube / test-ml (push) Failing after 6m8s
Details
SonarQube / build-front (push) Successful in 10m15s
Details
SonarQube / build-back (push) Successful in 10m47s
Details
SonarQube / test-front (push) Failing after 5m13s
Details
SonarQube / test-back (push) Failing after 5m22s
Details
SonarQube / SonarQube (push) Skipped
Details

Browse Source
This commit is contained in:
Dorian
2026-09-23 10:30:06 +02:00
parent cfc194a3fb
commit ac05da7001
2 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/backend/app/api/middleware.py
+2 -2
View File
@@ -16,8 +16,8 @@ EN_TETES: Final[dict[str, str]] = {
"X-Content-Type-Options": "nosniff",
"X-Frame-Options": "DENY",
"Referrer-Policy": "no-referrer",
# same-origin : le frontend ne consomme l'API qu'au travers d'un proxy same-origin
# (proxy.conf.json en dev, ingress /api en prod, cf. docs/architecture/20-backend.md).
# same-origin : aucun client ne charge l'API en no-cors depuis une autre origine
# (proxy.conf.json en dev, reverse proxy nginx ensuite, cf. docs/architecture/20-backend.md).
"Cross-Origin-Resource-Policy": "same-origin",
}