Merge branch 'aarthy/security' into 'enterprise'

fix(cors): add missing headers

See merge request dkinternal/observability/dataops-observability!43

Author: ci bot

common/api/flask_ext/cors.py

@@ -12,7 +12,7 @@
 
 CORS_HEADERS: dict[str, str] = {
     # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
-    "Access-Control-Allow-Headers": "Origin, Host, Authorization, X-Forwarded-For",
+    "Access-Control-Allow-Headers": "Accept, Content-Type, Origin, Host, Authorization, X-Forwarded-For",
     # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers
     # Add this only if we want to expose custom response headers
     # "Access-Control-Expose-Headers": "*",