Commit Graph

3 Commits

Author SHA1 Message Date
shinchan-zhai
07b4f30b85 docs: update nofxi-tasks.md — record 10:07 batch progress 2026-03-23 10:15:41 +08:00
shinchan-zhai
cbf78e6b88 docs: update nofxi-tasks.md — mark completed, clean false positives 2026-03-23 09:54:53 +08:00
shinchan-zhai
f26a69d222 security: configurable CORS origins, limit sentinel response body
- Add CORS_ALLOWED_ORIGINS config (comma-separated origins, default allow-all)
- CORS middleware now validates Origin header against allowlist
- Add io.LimitReader to sentinel.go (was unbounded, now 256KB)
- Include previous: agent chat auth middleware + frontend token header
2026-03-23 09:53:49 +08:00