clawbot 45228d9e99 fix: restrict CORS to same-origin (closes #23) ...

In dev mode, keep the wildcard origin for local testing convenience.
In production, skip CORS headers entirely since the web UI is
server-rendered and cross-origin requests are not expected.

2026-03-01 16:36:56 -08:00

4.6 KiB

Raw Blame History

View Raw