Skip to content

[pull] main from FlowiseAI:main#422

Merged
pull[bot] merged 2 commits intocode:mainfrom
FlowiseAI:main
Mar 23, 2026
Merged

[pull] main from FlowiseAI:main#422
pull[bot] merged 2 commits intocode:mainfrom
FlowiseAI:main

Conversation

@pull
Copy link

@pull pull bot commented Mar 23, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

…al abuse from any webpage (#5901)

* Stop text-to-speach endpoint from accepting arbitrary creds

* Stop text-to-speach endpoint from accepting arbitrary creds

* Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

* add: allow tts in domain validation

---------

Co-authored-by: christopherholland-workday <christopher.holland+evisort@workday.com>
Co-authored-by: yau-wd <yau.ong@workday.com>
Co-authored-by: Ilango Rajagopal <ilango.rajagopal@flowiseai.com>
@pull pull bot locked and limited conversation to collaborators Mar 23, 2026
@pull pull bot added the ⤵️ pull label Mar 23, 2026
@pull pull bot merged commit 7176dcb into code:main Mar 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant