update (rest): restrict allowed origins

app/server_clinical_embedding.py

@@ -35,7 +35,7 @@ app = FastAPI(
 # Add CORS middleware to allow web page access
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # In production, specify exact origins
+    allow_origins=["https://santanche-clinical-embedding.hf.space"],
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],

app/static/browser/index.html

@@ -287,8 +287,8 @@ Diabetes"></textarea>
                 <div class="form-group">
                     <label for="file-pooling">Pooling:</label>
                     <select id="file-pooling">
-                        <option value="mean" selected>Mean</option>
-                        <option value="cls">CLS</option>
+                        <option value="mean">Mean</option>
+                        <option value="cls" selected>CLS</option>
                         <option value="max">Max</option>
                     </select>
                 </div>