# fix\(server\): allow protocol negotiation in CORS · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/22acb619ed72c0dc9cf99959339fa0f36b36a3d8)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: 22acb619ed72c0dc9cf99959339fa0f36b36a3d8

Requested commit: 22acb619ed72c0dc9cf99959339fa0f36b36a3d8

Commit: 22acb619ed72c0dc9cf99959339fa0f36b36a3d8

Tree: 38ae01fdc41c14ab75709f7b88001347bac2e7a0

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
fix(server): allow protocol negotiation in CORS

Permit the canonical orchestration protocol header in browser API preflights so cross-origin web and desktop clients can negotiate compatibility while retaining authorization and DPoP headers.

Finding: D03

Model: GPT-5.6 Sol via Codex

```

## Parents

- [f7511d3e31c55c7495401bfb857a439ee03bda3d](https://git.cafe/pingdotgg/t3code/commit/f7511d3e31c55c7495401bfb857a439ee03bda3d?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/22acb619ed72c0dc9cf99959339fa0f36b36a3d8?format=markdown)