You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
router: deployments relying on the implicit allow-all CORS default must set cors_origins explicitly — a real allow-list, or ["*"] to keep allow-all (MA-2026-007).
Added
router: deny cross-origin by default — the CORS flip lands (v1 gate A-5a) (#191) (a69baed)
Documentation
governance: the v1.0 gate closes — waivers approved, rehearsal green (#193) (10c222f)