fix(dev): restrict default CORS origins and WebSocket allowed origins to localhost#1222

Merged

copybara-service[bot] merged 3 commits into

google:mainfrom

g0w6y:fix/dev-server-wildcard-cors-websocket-origin

Jul 3, 2026

Commits on May 26, 2026

fix(dev): restrict default CORS origins and WebSocket allowed origins to localhost
g0w6y
committed

Commits on Jun 29, 2026

fix(dev): use localhost port wildcard for default CORS/WebSocket origins
g0w6y
committed

Commits on Jul 1, 2026

fix(dev): keep '*' CORS default, drive WebSocket origins from config, warn on '*'
g0w6y
committed