chengshiwen edited a comment on pull request #4490:
URL:
https://github.com/apache/incubator-dolphinscheduler/pull/4490#issuecomment-763260869
In **SonarCloud Quality Gate**, **1 Security Hotspot** is the code about
`config.addAllowedOrigin("*");`, and the review priority of the security
hotspot is **LOW**. Althrough it's an insecure configuration, it is necessary
and common in cors.
Before this fix, DS also contains the following code:
```
@Override
public void addCorsMappings(CorsRegistry registry) {
registry.addMapping(PATH_PATTERN).allowedOrigins("*").allowedMethods("*");
}
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
