fix(server): trusted_hosts allowlist for reverse-proxy Host validation#899

Merged

Dumbris merged 7 commits into

mainfrom

fix/898-trusted-hosts

Jul 23, 2026

Commits on Jul 23, 2026

fix(server): trusted_hosts allowlist for reverse-proxy Host validation (#898)

Dumbris
and
claude
committed
fix(runtime): report trusted_hosts in DetectConfigChanges (Codex review)

Dumbris
and
claude
committed
Merge branch 'main' into fix/898-trusted-hosts
Dumbris
authored
docs: reverse-proxy / trusted_hosts discoverability (#898)

Dumbris
and
claude
committed
feat(server): Origin validation + leading-dot subdomain wildcard for trusted_hosts

Dumbris
and
claude
committed
fix(server): strict origin shape, trailing-dot FQDN match, docs precision (Codex round 3)

Dumbris
and
claude
committed
fix(server): reject dangling-colon and out-of-range ports in Origin (Codex round 4)

Dumbris
and
claude
committed