Skip to content

fix(api): authenticated file endpoint reflects any origin with credentials, enabling cross-origin theft of private user files - #2291

Closed
elberacasa wants to merge 1 commit into
refly-ai:mainfrom
elberacasa:fix/misc-static-cors-credentials
Closed

fix(api): authenticated file endpoint reflects any origin with credentials, enabling cross-origin theft of private user files#2291
elberacasa wants to merge 1 commit into
refly-ai:mainfrom
elberacasa:fix/misc-static-cors-credentials

Commits

  1. Commits on Aug 4, 2026