Dorian 2bfc36baa0 fix: restrict CORS to same-origin with explicit origin validation ...

Replace blanket cors_origin() with validate_origin() that checks the
incoming Origin header against allowed origins (host IP + dev server).
Unknown origins no longer receive Access-Control-Allow-Origin headers.
Also added X-CSRF-Token to allowed CORS headers.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-11 00:53:51 +00:00

..

archipelago

fix: restrict CORS to same-origin with explicit origin validation

2026-03-11 00:53:51 +00:00

container

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

container-init

mid coding commit

2026-01-24 22:59:20 +00:00

helpers

mid coding commit

2026-01-24 22:59:20 +00:00

js-engine

mid coding commit

2026-01-24 22:59:20 +00:00

models

mid coding commit

2026-01-24 22:59:20 +00:00

parmanode

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

performance

Update archipelago: API, auth, container, parmanode, performance, security

2026-01-27 22:27:17 +00:00

security

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

startos

mid coding commit

2026-01-24 22:59:20 +00:00

.env.example

Add comprehensive installation and setup documentation

2026-01-27 17:18:21 +00:00

.env.production

Update README and configuration for macOS support

2026-01-28 11:12:19 +00:00

Cargo.lock

feat: electrs standalone install with bitcoin dependency + progress UI

2026-03-08 02:16:02 +00:00

Cargo.toml

Refactor configuration and scripts for Archipelago backend and ISO build

2026-02-01 05:42:05 +00:00