CORS should only be bypassed on `PublicPage` if not logged in#36396

Merged

juliusknorr merged 1 commit intomasterfrom

Feb 17, 2023

Commits on Feb 16, 2023

fix(CORS): CORS should only be bypassed on `PublicPage` if not logged in to prevent CSRF attack vectors
susnux
committed