security: overwrite Gradio's reflected CORS on /respite/*

app.py

@@ -882,6 +882,35 @@ def _patched_create_app(blocks, **kwargs):
     except Exception as _se:
         _log(f"searxng bridge registration failed: {_se}")
 
+    # ── CORS gate for /respite/* ────────────────────────────────────────────
+    # Gradio installs a global CORS middleware that reflects the caller's
+    # Origin and sets `Access-Control-Allow-Credentials: true`. Applied to the
+    # whole app, that turns every route we inject below into a cross-origin
+    # readable endpoint — including the audio, search and inference routes,
+    # which have no auth of their own. The per-route headers set in
+    # node_probe.py are not enough on their own: this middleware runs outside
+    # the route handlers and re-adds its own on the way out.
+    #
+    # So it is added here, after Gradio's (Starlette runs the most recently
+    # added middleware outermost), and it rewrites the headers on the way out
+    # of the inner stack. Scoped to /respite/* so the Gradio UI itself is left
+    # alone.
+    try:
+        from node_probe import cors_headers as _respite_cors_headers
+
+        @fa_app.middleware("http")
+        async def _respite_cors_gate(request, call_next):
+            response = await call_next(request)
+            if request.url.path.startswith("/respite/"):
+                for name in list(response.headers.keys()):
+                    if name.lower().startswith("access-control-"):
+                        del response.headers[name]
+                for name, value in _respite_cors_headers(request).items():
+                    response.headers[name] = value
+            return response
+    except Exception as _ce:
+        _log(f"respite CORS gate not installed: {_ce}")
+
     _log("Routes injected via create_app monkey-patch")
     return fa_app