Update CORS test: no-Origin requests are allowed #103

Merged
will.anderson merged 1 commits from fix/stage-ci-paths into dev 2026-05-11 20:22:32 +00:00

1 Commits

Author SHA1 Message Date
will.anderson 1eeb8df04b Update CORS test: no-Origin requests are allowed (same-origin fix)
Same-origin browser fetches don't send Origin. The server correctly
allows them — blocking was the bug that broke checkout. Update the
test to match the fixed behavior.
2026-05-11 15:22:22 -05:00