Remove wildcard CORS (prevented cross-origin reads of biometric/case data from localhost), add optional shared-token auth gate on data routes (COPYRIGHTER_AUTH_TOKEN; GUI shell + /health stay open), cap request body size (413), and map malformed JSON to 400 and SQLite lock contention to 503. |
||
|---|---|---|
| .. | ||
| operator_gui | ||
| rights_filter | ||