Description
Review CORS configuration and validate allowed origins during application startup.
Acceptance Criteria
Allowed origins are explicitly configurable.
Invalid origin configuration is rejected.
Wildcard configuration is clearly documented.
Sensitive environments do not silently fall back to permissive settings.
Description
Review CORS configuration and validate allowed origins during application startup.
Acceptance Criteria
Allowed origins are explicitly configurable.
Invalid origin configuration is rejected.
Wildcard configuration is clearly documented.
Sensitive environments do not silently fall back to permissive settings.