RenovateBot: Update dependency Flask-Cors to v3.0.9
This MR contains the following updates:
Package | Update | Change |
---|---|---|
Flask-Cors | patch |
==3.0.8 -> ==3.0.9
|
Release Notes
corydolphin/flask-cors
v3.0.9
Security
- Escape path before evaluating resource rules (thanks to Colby Morgan). Prior to this, flask-cors incorrectly evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for "/api/*" whereas the path actually expands simply to "/foo.txt"
Renovate configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.