Django CORS and CSRF per Chatbot: Each LLM Names the Web Pages That May Call It

Smarter extends django-cors-headers and Django’s CSRF middleware so that every deployed chatbot carries its own list of allowed browser origins, declared in its YAML manifest, instead of sharing one platform-wide list. This post explains what that list protects, what it…









