2 Commits

Author	SHA1	Message	Date
clawbot	02847eea92	fix: restrict CORS to configured origins (closes #40) ... - Add CORSOrigins config field (UPAAS_CORS_ORIGINS env var) - Default to same-origin only (no CORS headers when unconfigured) - When configured, allow specified origins with AllowCredentials: true - Add tests for CORS middleware behavior	2026-02-19 13:45:18 -08:00
clawbot	506c795f16	test: add CORS middleware tests (failing - TDD)	2026-02-19 13:43:33 -08:00