Enable CORS for Code Interpreter Server#242
Conversation
mishushakov
commented
Mar 30, 2026
- some people complained being unable to access Code Intrepreter methods from Browser
PR SummaryMedium Risk Overview Includes a changeset bumping Written by Cursor Bugbot for commit 7517484. This will update automatically on new commits. Configure here. |
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix prepared a fix for the issue found in the latest run.
- ✅ Fixed: Wildcard CORS origins combined with credentials is insecure
- Set CORSMiddleware to disallow credentials while keeping wildcard origins, removing the insecure credentialed cross-origin behavior.
Or push these changes by commenting:
@cursor push a8e3782b91
Preview (a8e3782b91)
diff --git a/template/server/main.py b/template/server/main.py
--- a/template/server/main.py
+++ b/template/server/main.py
@@ -64,7 +64,7 @@
app.add_middleware(
CORSMiddleware,
allow_origins=["*"],
- allow_credentials=True,
+ allow_credentials=False,
allow_methods=["*"],
allow_headers=["*"],
)This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 091aa47b3d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

