Sameh KhamisandClaude Opus 5.5 6cdd6c8af9 refactor(server): share one proxy-header check across the local gates ...

localRequestGate.mjs owns the reverse-proxy header list and hasProxySignals;
Provider Settings, the cross-site gate and /mcp all use it instead of two
copies of the same nine names. The changelog credits the cross-site gate.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-10-02 20:02:48 -07:00

..

plugin.js

refactor(server): share one proxy-header check across the local gates

2026-10-02 20:02:48 -07:00

server.js

fix(mcp): require the panel key for panel requests

2026-10-02 19:47:37 -07:00

services.js

fix(mcp): require the panel key for panel requests

2026-10-02 19:47:37 -07:00

stdio.js

fix(mcp): bound panel requests, request bodies and cancelled calls

2026-10-02 19:47:37 -07:00