From daedd76accdb0aa2fbbb8baa525f95dbbc0b5d91 Mon Sep 17 00:00:00 2001 From: Said Turksever Date: Wed, 21 Oct 2026 17:33:13 +0100 Subject: [PATCH] docs(changelog): fragment for #1308 Co-Authored-By: Claude Fable 5.1 --- changelog.d/1308-overpass-admission-review-fixes.md | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 changelog.d/1308-overpass-admission-review-fixes.md diff --git a/changelog.d/1308-overpass-admission-review-fixes.md b/changelog.d/1308-overpass-admission-review-fixes.md new file mode 100644 index 000000000..f708b375f --- /dev/null +++ b/changelog.d/1308-overpass-admission-review-fixes.md @@ -0,0 +1,8 @@ +- Keep Overpass-backed layers working behind a reverse proxy: `/api/overpass` + now uses the keyless same-site gate, admits forwarding headers and still + refuses cross-site requests; loopback keeps its own admission window and + IPv6 peers are keyed by /64, so a few LAN peers cannot lock the owner out + (asturksever, #1308). +- Give the tracking arrival check a wall-clock budget per observed frame and + retry an inconclusive timeout, so slow software-rendered frames no longer + fail it (asturksever, #1308).