@@ -32,7 +32,9 @@ CORS(app, resources={r"/api/*": {"origins": [
r"https?://localhost:\d+",
r"https?://127\.0\.0\.1:\d+",
r"https?://localhost"
]}})
]}},
expose_headers=['Content-Disposition']
)
limiter.init_app(app)
The note is not visible to the blocked user.