Disallows registering bindings (through %connect and %serve) that would capture
traffic on paths starting with /~ (Eyre's) or /~_~ (runtime's, as of cc389c5).
Note that we don't touch +insert-binding, which is used by Eyre internally to
set up bindings in its own namespace.
* origin/lf/global-skeleton-links: (59 commits)
chat: resolve conflicts in #3646
interface: added the ability to make and redirect to a new DM from the ProfileOverlay
interface: popover uses scales.black30 not gray
chat: indigo-react unread notice
chat: f8 group link text
chat: set input for light mode
groups: truncate long recent group entries
interface: moved components/lib to components
chat: bumping chat input size
interface: removed unused Chat components
publish: safety check note view
publish: fix horizontal padding on small desktop
links: prevent hostname arrow line breaking in safari
links: prevent shrinking of comment input
links: pass remotecontent policy
publish: prevent crash on refreshing notebook
groups: properly check and await notebook join
groups: allow line breaks in description prompt
links: restore flexbox truncation
interface: calc skeleton size for safari
...
Signed-off-by: Matilde Park <matilde.park@sunshinegardens.org>
* origin/la/cleanup-chat:
chat: resolve conflicts in #3646
interface: added the ability to make and redirect to a new DM from the ProfileOverlay
interface: moved components/lib to components
interface: removed unused Chat components
Signed-off-by: Matilde Park <matilde.park@sunshinegardens.org>
Adds a cors-registry to Eyre's state that tracks allowed and rejected
origins for the purposes of CORS request handling.
For preflight requests, generates a response in-line.
For simple requests, adds CORS headers onto whatever response is given.
See also:
https://groups.google.com/a/urbit.org/g/dev/c/bb82dwEJGzM/m/q2JjNSx5BwAJ
