creatixchu b9cbe2f029 fix(connection): fail the load on a trustedHosts entry that is not a bare authority ...

WHATWG parsing would quietly read a hostname out of harness.internal/path or
user@harness.internal, authorizing the typo's hostname; other typos would sit
silently ignored until requests 403. Refuse every URL part beyond host[:port]
at plugin load.

2026-07-28 15:57:02 +08:00

..

api-helpers.spec.ts

feat(gui): step1 skeleton — dsc web serves built web UI over booted harness host

2026-07-22 16:24:44 +08:00

api-request-trust.spec.ts

fix(connection): fail the load on a trustedHosts entry that is not a bare authority

2026-07-28 15:57:02 +08:00

client-apply.spec.ts

ci: coverage

2026-07-22 17:23:59 +08:00

connection.spec.ts

feat(gui): step1 skeleton — dsc web serves built web UI over booted harness host

2026-07-22 16:24:44 +08:00

fake-api.ts

Merge remote-tracking branch 'origin/master' into worktree/web-session-model-selector

2026-07-28 00:39:24 +08:00

fixture-commands.spec.ts

feat: slash system / input service / agent scope

2026-07-27 03:28:39 +08:00

fixture.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/web-session-model-selector

2026-07-27 17:18:29 +08:00

http-bridge.spec.ts

feat(gui): add native workspace folder picker

2026-07-27 03:50:22 -07:00

node-half.spec.ts

fix(connection): fail the load on a trustedHosts entry that is not a bare authority

2026-07-28 15:57:02 +08:00