AndreyandClaude Opus 4.8 f5bec6bf77 🔒 fix(security): make CORS allowlist env-driven (#7) ...

- CORS_ALLOWED_ORIGINS read from HUB_CORS_ALLOWED_ORIGINS (comma-separated),
  defaulting to the local dev origins; production sets real domains via env
- document the variable in .env.example
- tests cover allowed/unknown origin and preflight short-circuit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 18:40:04 +03:00

..

__init__.py

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00

middleware.py

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00

tests.py

🔒 fix(security): make CORS allowlist env-driven (#7)

2026-06-23 18:40:04 +03:00