sudacode/SubMiner
1
0
Fork 0
mirror of https://github.com/ksyasuda/SubMiner.git synced 2026-09-22 17:16:19 -07:00
Code Issues Packages Projects Releases Wiki Activity

chore(release): prepare v0.20.0-beta.1

Browse Source 
Trim pending change fragments, drop the breaking flag from the stats
request-safety change, and generate prerelease notes.
This commit is contained in:
sudacode
2026-09-22 01:29:58 -07:00
parent 786bd5af81
commit 122ff9a3c5
20 changed files with 114 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/stats-request-safety.md
+1 -3
View File
@@ -1,6 +1,4 @@
type: changed
breaking: true
area: stats
- Reject requests from untrusted browser origins and hosts before stats data, media, or Anki operations run, and require JSON for mutation bodies.
- Load the in-app stats overlay from the local server so it uses the same origin protection as the browser dashboard.
- The stats server now rejects requests from non-loopback hosts and browser origins and requires `application/json` for mutation bodies. The in-app stats overlay loads from the local server so it shares the same protection. Reverse-proxied or Tailscale Serve dashboards are unsupported; scripts that POST must set a JSON content type.