refactor: improve allowed origins parsing logic for better clarity

index.js

@@ -17,7 +17,16 @@ import { startup } from './src/utils/startup.js';
 import { fileURLToPath } from 'url';
 
 const PORT = process.env.PORT;
-const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(',') || []; // localhost is also allowed. (from any localhost port)
+const parseAllowedOrigins = (allowedOrigins) => {
+    if (!allowedOrigins) return [];
+    const stripped = allowedOrigins.trim().replace(/^\[|\]$/g, '');
+    return stripped
+        .split(',')
+        .map((s) => s.trim().replace(/^\"|\"$|^\'|\'$/g, ''))
+        .filter(Boolean);
+};
+// localhost is also allowed. (from any localhost port)
+const allowedOrigins = parseAllowedOrigins(process.env.ALLOWED_ORIGINS) || [];
 const app = express();
 
 app.use(

package.json

@@ -31,7 +31,7 @@
         "express": "^5.1.0",
         "node-cache": "^5.1.2",
         "node-fetch": "^3.3.2",
-        "prettier": "^3.6.2",
+        "prettier": "^3.7.3",
         "unpacker": "^1.0.1",
         "wyzie-lib": "^2.2.5"
     },