i/next-ai-draw-io
1
0
Fork 0
mirror of https://github.com/DayuanJiang/next-ai-draw-io.git synced 2026-09-03 10:00:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(mcp-server): restrict CORS to same-origin only

Browse Source 
Replace wildcard `Access-Control-Allow-Origin: *` with same-origin check,
preventing external websites from accessing MCP server APIs via cross-origin requests.
This commit is contained in:
dayuan.jiang
2026-03-24 11:40:14 +09:00
parent 524b77a948
commit c1f09191d2
3 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/mcp-server/package.json
View File

@@ -1,6 +1,6 @@
{
"name": "@next-ai-drawio/mcp-server",
"version": "0.1.16",
"version": "0.1.17",
"description": "MCP server for Next AI Draw.io - AI-powered diagram generation with real-time browser preview",
"type": "module",
"main": "dist/index.js",