alro65 235a9abbfe security: SECRET_KEY from env, CORS restricted to localhost ...

- Replace hardcoded secret_key with os.environ.get('SECRET_KEY')
- RuntimeError if SECRET_KEY not set (fail fast)
- Restrict CORS to localhost:8765 origins (was allow all with credentials)
- Add .gitignore excluding db, env, __pycache__, backups

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-03 12:55:19 -04:00

..

index.html

security: SECRET_KEY from env, CORS restricted to localhost

2026-07-03 12:55:19 -04:00