Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage#5901

Merged

0xi4o merged 7 commits intomainfrom

text-to-speach-fixes

Mar 23, 2026

Commits on Mar 4, 2026

Stop text-to-speach endpoint from accepting arbitrary creds
christopherholland-workday
committed
Merge branch 'main' of https://github.com/FlowiseAI/Flowise
christopherholland-workday
committed
Stop text-to-speach endpoint from accepting arbitrary creds
christopherholland-workday
committed

Commits on Mar 5, 2026

Merge branch 'main' into text-to-speach-fixes
yau-wd
authored

Commits on Mar 9, 2026

Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage
christopherholland-workday
committed

Commits on Mar 10, 2026

Merge branch 'main' into text-to-speach-fixes
yau-wd
authored

Commits on Mar 12, 2026

add: allow tts in domain validation
0xi4o
committed