[pull] main from FlowiseAI:main#422

Merged

pull[bot] merged 2 commits intocode:mainfrom

Mar 23, 2026

Commits on Mar 23, 2026

Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage (#5901)

authored
Additional Improvements to MCP Server Config security (#5943)
christopherholland-workday
authored