added cors

app.py

@@ -1,6 +1,7 @@
 from preditormodels import PhishingPredictor
 import re
 from fastapi import FastAPI, HTTPException
+from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel, field_validator
 from config import XGB_MODEL_PATH, BERT_MODEL_PATH
 class EmailRequest(BaseModel):
@@ -21,6 +22,22 @@ class EmailRequest(BaseModel):
 
 app = FastAPI(title="Phishing Detection API")
 
+# Define the specific origins that are allowed to call this API
+origins = [
+    "http://localhost:3000",      # React/Frontend local development
+    "http://127.0.0.1:5500",      # VS Code Live Server default
+    "http://127.0.0.1:8500",      # Your FastAPI local address
+    "http://localhost:5500",      # Alternative Live Server address
+]
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,        # Only allow the domains in the list above
+    allow_credentials=True,
+    allow_methods=["*"],          # Allows all HTTP methods (POST, GET, etc.)
+    allow_headers=["*"],          # Allows all headers (Content-Type, etc.)
+)
+
 
 # Load models once
 predictor = PhishingPredictor(BERT_MODEL_PATH, XGB_MODEL_PATH)