will.anderson 1eeb8df04b Update CORS test: no-Origin requests are allowed (same-origin fix) ...

Same-origin browser fetches don't send Origin. The server correctly
allows them — blocking was the bug that broke checkout. Update the
test to match the fixed behavior.

2026-05-11 15:22:22 -05:00

..

endpoints.test.ts

test: full Playwright + API test suite for stage

2026-05-11 00:28:33 -05:00

security.test.ts

Update CORS test: no-Origin requests are allowed (same-origin fix)

2026-05-11 15:22:22 -05:00