CORS on asset hostnames and HTTPS-only GraphQL API from December 7, 2026
- Security
- Developer Experience
- Infrastructure
On December 7, 2026, we make two changes: the main asset hostnames start sending CORS headers, and the GraphQL API only accepts HTTPS. Most setups don't need any change.