fix: BUG-009 setTimeout syntax, BUG-010 CORS helmet policy, BUG-011 content-type validation

This commit is contained in:
OpenClaw 2026-02-14 15:34:21 +00:00
parent 6891e488b6
commit d8bc3fd8e6
3 changed files with 8 additions and 2 deletions

View file

@ -20,7 +20,7 @@ const PORT = parseInt(process.env.PORT || "3100", 10);
// Load API keys from persistent store
loadKeys();
app.use(helmet());
app.use(helmet({ crossOriginResourcePolicy: { policy: "cross-origin" } }));
// CORS — allow browser requests from the landing page
app.use((req, res, next) => {