merge security fix from upstream#2

aeltorio merged 2 commits into

sctg-development:cors-allow-hostsctg-development/codex-proxy:cors-allow-hostfrom

icebear0828:devicebear0828/codex-proxy:devCopy head branch name to clipboard