freeman
0cfb292cef
fix(api): disable CORS credentials for wildcard origins
...
ALLOWED_HOSTS defaults to ["*"] and the CORS middleware always set
allow_credentials=True. Starlette echoes any request Origin with
Access-Control-Allow-Credentials in that combination, which lets every
site make credentialed cross-origin calls. resolve_cors_policy now
returns credentials=False for wildcard origins and keeps credentials
only when explicit origins are configured.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-10-09 11:39:12 +08:00
..
2026-10-08 21:22:17 +08:00
2026-10-07 09:16:33 +08:00
2026-10-04 19:01:22 +08:00
2026-10-06 03:05:16 +08:00
2026-10-08 13:43:59 +08:00
2026-10-04 20:19:37 +08:00
2026-10-07 09:18:40 +08:00
2026-10-05 07:35:05 +08:00
2026-10-05 15:42:28 +08:00
2026-10-07 09:18:40 +08:00
2026-10-07 13:27:15 +08:00
2026-10-07 09:18:40 +08:00
2026-10-07 09:17:33 +08:00
2026-10-07 09:18:40 +08:00
2026-10-05 16:38:08 +08:00
2026-10-04 16:19:58 +08:00
2026-10-05 15:42:28 +08:00
2026-10-08 08:51:01 +08:00
2026-10-06 15:07:24 +08:00
2026-10-04 19:01:22 +08:00
2026-10-09 11:39:12 +08:00
2026-10-05 07:35:05 +08:00
2026-10-06 02:44:02 +08:00
2026-10-08 13:46:57 +08:00
2026-10-08 17:18:10 +08:00
2026-10-06 07:32:06 +08:00
2026-10-07 09:18:40 +08:00
2026-10-07 09:17:33 +08:00
2026-10-05 13:10:10 +08:00
2026-10-08 18:40:16 +08:00
2026-10-08 08:51:01 +08:00
2026-10-05 15:42:29 +08:00
2026-10-04 19:01:22 +08:00
2026-10-08 17:18:10 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-05 17:15:14 +08:00
2026-10-08 08:51:01 +08:00
2026-10-08 18:40:16 +08:00
2026-10-05 17:15:14 +08:00
2026-10-05 16:52:41 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-08 11:57:10 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-08 21:22:17 +08:00
2026-10-05 17:54:29 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-07 14:40:55 +08:00
2026-10-05 13:01:42 +08:00
2026-10-07 14:40:55 +08:00
2026-10-08 13:23:58 +08:00
2026-10-06 07:40:06 +08:00
2026-10-08 13:42:08 +08:00
2026-10-07 09:16:33 +08:00
2026-10-05 15:42:29 +08:00
2026-10-04 16:19:58 +08:00