Fix: disable Streamlit XSRF and CORS protection for HF Spaces file upload

supervisord.conf

@@ -16,7 +16,7 @@ stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 
 [program:frontend]
-command=python -m streamlit run app.py --server.port 7860 --server.address 0.0.0.0 --server.headless true
+command=python -m streamlit run app.py --server.port 7860 --server.address 0.0.0.0 --server.headless true --server.enableXsrfProtection false --server.enableCORS false
 directory=/app/frontend
 environment=PYTHONPATH="/app/frontend:/app"
 autostart=true