 weichen
|
171959710d
|
fix(security): add CORS allowlist and enforce principal on chat handlers
Replace wildcard CORS with configured origins and bind chat/task user
identity to the authenticated principal instead of request body fields.
|
2026-09-13 02:50:22 +00:00 |
|