feat(security): SEC-015 Strict CORS Origin Validation and Specs Update

This commit is contained in:
DmitrL-dev 2026-03-27 20:58:59 +10:00
parent 2a3ed1c319
commit 7bd08dc9be
4 changed files with 51 additions and 40 deletions

View file

@ -63,7 +63,7 @@ func newTestServer(t *testing.T) (*httptest.Server, *appsoc.Service) {
mux.HandleFunc("GET /api/soc/incident-explain/{id}", srv.handleIncidentExplain)
mux.HandleFunc("GET /health", srv.handleHealth)
ts := httptest.NewServer(corsMiddleware(mux))
ts := httptest.NewServer(corsMiddleware([]string{"*"})(mux))
t.Cleanup(ts.Close)
return ts, socSvc