inspector/server
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Felix Weinberger 15ecb59a96
feat: add origin validation to prevent DNS rebinding attacks
- Add origin validation middleware to check Origin header
- Default allowed origins respect CLIENT_PORT environment variable
- Support ALLOWED_ORIGINS environment variable for additional origins
- Apply validation to all protected endpoints before auth check
- Return 403 Forbidden with clear message for invalid origins
- Add DNS Rebinding Protection section to README

This completes the security hardening by preventing malicious websites
from making requests to the local proxy server.
2025-06-10 18:16:35 +01:00
..
src feat: add origin validation to prevent DNS rebinding attacks 2025-06-10 18:16:35 +01:00
package.json Bump Inspector packages to 0.14.0, and sdk to 1.12.1 2025-06-04 16:13:35 -04:00
tsconfig.json init server 2024-10-07 16:27:49 -07:00