# fix\(server\): allow protocol negotiation in CORS · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/8875388a2bca4398345db564463f3eab5fab6b95)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: 8875388a2bca4398345db564463f3eab5fab6b95

Requested commit: 8875388a2bca4398345db564463f3eab5fab6b95

Commit: 8875388a2bca4398345db564463f3eab5fab6b95

Tree: 12e23992ceb297afe6f98e5bb4142014fffaa1f6

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
fix(server): allow protocol negotiation in CORS

Permit the canonical orchestration protocol header in browser API preflights so cross-origin web and desktop clients can negotiate compatibility while retaining authorization and DPoP headers.

Finding: D03

Model: GPT-5.6 Sol via Codex

```

## Parents

- [2b441fe3faf9e7cc1c8f760097359fe1c0a1284c](https://git.cafe/pingdotgg/t3code/commit/2b441fe3faf9e7cc1c8f760097359fe1c0a1284c?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/8875388a2bca4398345db564463f3eab5fab6b95?format=markdown)