fix: CORS origin prefix matching

src/index.ts

@@ -16,12 +16,22 @@ const rootPath = "/api/altText/";
 app.use(
 	"*",
 	cors({
-		origin: [
-			"https://indexx.dev",
-			"chrome-extension://*",
-			"safari-web-extension://*",
-			"moz-extension://*",
-		],
+		origin: (origin) => {
+			const allowedOrigins = [
+				"https://indexx.dev",
+				"chrome-extension://",
+				"safari-web-extension://",
+				"moz-extension://",
+			];
+
+			if (
+				origin &&
+				allowedOrigins.some((allowed) => origin.startsWith(allowed))
+			) {
+				return origin;
+			}
+			return null;
+		},
 		allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
 		allowHeaders: ["*"],
 		maxAge: 600,