--- id: flask-cors version: "6.0.5" license: MIT license_treatment: permissive maintenance: active --- # flask-cors — A Flask extension simplifying CORS support License: permissive · Maintenance: active · Popularity: top 1,000 on PyPI ## Install pip install flask-cors uv add flask-cors poetry add flask-cors ## Description Flask-CORS ========== |Build Status| |Latest Version| |Supported Python versions| |License| A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. This package has a simple philosophy: when you want to enable CORS, you wish to enable it for all use cases on a domain. This means no mucking around with different allowed headers, methods, etc. By default, submission of cookies across domains is disabled due to the security implications. Please see the documentation for how to enable credential'ed requests, and please make sure you add some sort of `CSRF `__ protection before doing so! Installation ------------ Install the extension with using pip, or easy\_install. .. code:: bash $ pip install -U flask-cors Usage ----- This package exposes a Flask extension which by default enables CORS support on all routes, for all origins and methods. It allows parameterization of all CORS headers on a per-resource level. The package also contains a decorator, for those who prefer this approach. Simple Usage ~~~~~~~~~~~~ In the simplest case, initialize the Flask-Cors... ## AI interpretation — verify before relying Flask-CORS is a Flask extension that enables Cross-Origin Resource Sharing (CORS) on web routes, allowing cross-origin AJAX requests with configurable per-resource or global policies. Verdict: Flask-CORS is a well-maintained, permissively licensed extension for handling CORS in Flask applications with minimal dependencies and no known vulnerabilities. It's suitable for production use with straightforward setup and flexible per-route or global configuration. [View on SkillFed](https://skillfed.io/packages/flask-cors) · [View on PyPI](https://pypi.org/project/flask-cors/)