Update app.py

app.py

@@ -8,8 +8,8 @@ app = Flask(__name__)
 app.config['SECRET_KEY'] = 'your-secret-key'  # Replace with a secure key
 
 # Configure SocketIO with CORS for all origins and threading mode
-socketio = SocketIO(app, 
-                    cors_allowed_origins="*",  # Allow all origins (or specify "https://broadfield-dev-dungeon-game.hf.space" for security)
+socketio = SocketIO(app,
+                    cors_allowed_origins="https://broadfield-dev-dungeon-game.hf.space",  # Specify your Spaces URL
                     async_mode='threading')    # Use threading instead of eventlet
 
 # Store game instances per client session