mirror of
https://github.com/Routstr/routstr-core.git
synced 2026-08-12 12:13:21 +00:00
Browser clients need these EHBP protocol headers visible to JavaScript so the Tinfoil SDK can detect and decrypt encrypted responses. Without them, CORS hides the headers, the SDK treats the response as a plaintext proxy error, and users see 'The provider did not respond to this request.' Node.js scripts are unaffected (no CORS enforcement). See ../routstr-chat/TINFOIL_CORS_ISSUE.md for full root-cause analysis.