theopenconversationkit / tock

Tock, the open source conversational AI toolkit.
https://doc.tock.ai
Apache License 2.0
505 stars 134 forks source link

[Web Connector] CORS rules are too lenient #1598

Closed Fabilin closed 6 months ago

Fabilin commented 7 months ago

The current behaviour of the web connector is to accept connections from any host domain. However, some applications could benefit from customizing the CORS rules' allowed origin pattern to strengthen their security.