clawbot 45228d9e99 fix: restrict CORS to same-origin (closes #23) ...

In dev mode, keep the wildcard origin for local testing convenience.
In production, skip CORS headers entirely since the web UI is
server-rendered and cross-origin requests are not expected.

2026-03-01 16:36:56 -08:00

..

middleware.go

fix: restrict CORS to same-origin (closes #23)

2026-03-01 16:36:56 -08:00