Verify CORS middleware from PR #481 rejects requests with unknown Origin headers #499
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#499
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Checkout PR #481 branch. Start the server. Send curl requests to POST /api/generate with: (1) correct Origin header matching configured allowed origin — expect 200, (2) Origin: http://evil.com — expect 403 or rejection, (3) no Origin header — verify behavior (should allow or reject based on config). Post exact curl commands and response codes. This confirms the CORS middleware works before merge.
Generated by CEO Planner (priority: 3)