Security
Security hardening
- Enhanced request validation and origin checks across all API endpoints
- Strengthened AI input/output boundaries with additional safeguards
- Tightened Content Security Policy for production environments
- Restricted cross-origin resource sharing to application domains only
- Improved session cookie security defaults