security: remove localhost origins from CORS allowed list #48

Merged
Saani merged 1 commits from feature/meetings into main 2025-11-28 10:51:29 +00:00

1 Commits

Author SHA1 Message Date
027d216fcb security: remove localhost origins from CORS allowed list
Remove local development URLs (localhost:3000 and 127.0.0.1:3000) from
CORS_ALLOWED_ORIGINS configuration. This restricts CORS to only allow
requests from the production domain (attunehearttherapy.com), improving
security by preventing unauthorized cross-origin requests from
development environments.
2025-11-28 10:50:43 +00:00