chengshiwen edited a comment on pull request #4490: URL: https://github.com/apache/incubator-dolphinscheduler/pull/4490#issuecomment-763260869
In **SonarCloud Quality Gate**, **[1 Security Hotspot](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=4490&resolved=false&types=SECURITY_HOTSPOT)** is the code about `config.addAllowedOrigin("*");`, and the review priority of the security hotspot is **LOW**. Althrough it's an insecure configuration, it's necessary and common for cors. Before this fix, DS also contains the following code: ``` @Override public void addCorsMappings(CorsRegistry registry) { registry.addMapping(PATH_PATTERN).allowedOrigins("*").allowedMethods("*"); } ``` ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
