Ë ÄPi_ ãóD—ddlZddlmZddlmZddlmZGd„d«Zy)éN)ÚCORS)ÚFlask)Úenvcó<—eZdZdZedefd„«Zedefd„«Zy)ÚSecurityConfigu보안 설정 í´ëž˜ìŠ¤Úappc ó —tjdddg¬«}tjd«dk(r|jgd¢«t ||tjdgd ¢¬«tjd gd ¢¬«d d ¬«y)u CORS 설정ÚALLOWED_ORIGINSzhttps://mlink.sellmall.co.krzhttps://www.sellmall.co.kr)ÚdefaultÚ ENVIRONMENTÚ development)zhttp://localhost:3000zhttp://localhost:3001zhttp://127.0.0.1:3000zhttp://127.0.0.1:3001ÚALLOWED_METHODS)ÚGETÚPOSTÚPUTÚDELETEÚOPTIONSÚALLOWED_HEADERS)z Content-TypeÚ AuthorizationzX-Requested-Withz X-CSRF-TokenTi)ÚoriginsÚmethodsÚ allow_headersÚsupports_credentialsÚmax_ageN)rÚget_listÚgetÚextendr)rÚallowed_originss úF/home/kdj-ubuntu1/mlink_AI_Server/mlink-backend/src/config/security.pyÚconfigure_corszSecurityConfig.configure_cors sŠ€ôŸ,™,Ð'8Ø *Ø (ðC ô ˆô 7‰7=Ó ! ]Ò 2Ø × "Ñ "ò$ô ô Ø Ø#Ü—L‘LÐ!2ò=ôôŸ,™,Ð'8òCôð "&Øö ócó(—|jd„«}y)u보안 í—¤ë” ì„¤ì •cóÜ—d|jd<d|jd<d|jd<d|jd<d }||jd <d |jd <d |jd<|S)NÚnosniffzX-Content-Type-OptionsÚDENYzX-Frame-Optionsz 1; mode=blockzX-XSS-Protectionz#max-age=31536000; includeSubDomainszStrict-Transport-SecurityzÞdefault-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://api.openai.com https://media.tenor.com; frame-ancestors 'none';zContent-Security-Policyzstrict-origin-when-cross-originzReferrer-Policyzmgeolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()zPermissions-Policy)Úheaders)ÚresponseÚcsps rÚadd_security_headerszGSecurityConfig.configure_security_headers..add_security_headers/sš€ð:CˆH× Ñ Ð5Ñ 6Ø28ˆH× Ñ Ð.Ñ /Ø3BˆH× Ñ Ð/Ñ 0ð=bˆH× Ñ Ð8Ñ 9ð*ð ð;>ˆH× Ñ Ð6Ñ 7ð3TˆH× Ñ Ð.Ñ /ð#ð × Ñ Ð1Ñ 2ðˆOr!N)Ú after_request)rr)s rÚconfigure_security_headersz)SecurityConfig.configure_security_headers,s€ð × Ñ ñ# ó ñ# r!N)Ú__name__Ú __module__Ú __qualname__Ú__doc__Ú staticmethodrr r+©r!rrrs:„Ù!àð ˜Eò óð ðBð&¨ò&óñ&r!r)ÚosÚ flask_corsrÚflaskrÚsrc.config.env_loaderrrr1r!rÚr6sðã ÝÝÝ%÷LòLr!