Sameh KhamisandClaude Opus 5.5 fec93aa817 fix(mcp): accept only direct local requests at /mcp ...

The /mcp route now applies the same proxy and sharing checks as Provider
Settings: requests carrying forwarding headers, or arriving while launcher
sharing is on, are refused. The Host must name the port the request reached
and a browser Origin must match that host exactly. The proxy and sharing
checks move into shared helpers in keySetupCore; Provider Settings behaves
as before.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-10-02 19:47:37 -07:00

..

media

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

APPLICATION.md

docs: bring the README, data sources and known issues up to date (#712)

2026-09-22 18:31:02 -05:00

CODE-BOUNDARIES.md

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

CURRENT-STATE.md

fix(mcp): accept only direct local requests at /mcp

2026-10-02 19:47:37 -07:00

DIRECTOR-CAMERA.md

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

DIRECTOR-DATA-PACKS.md

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

DIRECTOR-INTERACTIONS.md

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

DIRECTOR-SHARING.md

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

DIRECTOR.md

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

INFRASTRUCTURE-LAYERS.md

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

KNOWN-ISSUES.md

docs: bring the README, data sources and known issues up to date (#712)

2026-09-22 18:31:02 -05:00

LOCAL-RECEIVERS.md

feat(sdr): local receivers — browser RTL-SDR, Local ADS-B layer and decoder feeds (#732)

2026-09-23 16:00:53 -05:00

MAINTAINER_WORKFLOW.md

docs: formalize community PR review and integration

2026-09-14 17:01:53 -07:00

MCP_SETUP.md

docs: drop the server check from the MCP setup

2026-10-02 18:29:42 -07:00

opensky-auth.md

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

PERFORMANCE.md

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

SCENE-DOCUMENT.md

feat(director): add bounded scene data packs and placement

2026-09-15 17:59:53 -07:00

TOOLS.md

fix(mcp): accept only direct local requests at /mcp

2026-10-02 19:47:37 -07:00

UI-OWNERSHIP.md

refactor: separate application shell state and lifecycle owners

2026-09-15 11:17:10 -07:00

VOICE-OWNERSHIP.md

fix(voice): discard continuations from closed conversations

2026-09-15 12:13:35 -07:00