- Shipped
- August 20, 2026 at 1:24 AM UTC
- Author
- Kamo
- Commit
- d8f99d9
Clones forwardPublicWebinar rather than the generic forward(): that method prints every URI, header map and body length to stdout with no level, and a visitor beacon carries an IP and a referer. The API key here is a rate-limit and abuse control, not a tenancy boundary. One marketing pod serves every www.* host with one public key, so the key's org is always the platform org — the tracking code's own organizationId is what decides tenancy, downstream in MediaService. That reasoning is in a comment at the call site so it does not get "fixed" into a broken org check later.