Kutetea lazima-origin kwa Awamu ya 1 - OriginMatcher opt-in (empty kuruhusu-list / missing asili kuruhusiwa)

Ya: 16 Julai 2026, 00:21 UTC
Mwandishi: Kamo
Ahadi ya: f11a888

Phase-0 widgets still call via their server-side proxy, so origin-locking has no benefit yet and every live public-chat key has an empty allow-list. Strict enforcement (empty=deny, missing-Origin=deny) broke the marketing + sign.pink chat AND regressed VOIP-recording-upload / subscription-catalog keys that share the cached validator. Opt-in: no configured origins => allow; missing Origin => allow; only a key that set an allow-list with a present, non-matching Origin is denied. Phase 1 flips this to mandatory once keys have origins configured.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru Milele Mtazamo wa bei