5 commits

Author	SHA1	Message	Date
nesquena-hermes	8f3f6ea67a	stage #4593 onto master (v0.51.550) — document extension sidecar CSP support + CSP test coverage ... santastabber: docs (README + EXTENSIONS.md) clarifying extension sidecar CSP behavior + test_issue1909_csp_enforcement / test_issue2901_csp_connect_extra assertions. Docs+tests only, no prod code. Co-authored-by: santastabber <santastabber@users.noreply.github.com>	2026-06-21 07:04:31 +00:00
Rod Boev	e73cf3d610	test(csp): pin ipc localhost across enforcing coverage (#4040)	2026-06-12 08:18:04 -04:00
Rod Boev	ddcaf6091c	fix(#4040): allow Tauri IPC host in connect-src	2026-06-12 07:50:43 -04:00
nesquena-hermes	bc6949219d	Release v0.51.317 — Release KG (Phase 3 light: align CSP enforcement with report policy, #3727) (#3786) ... Phase-3-LOW backend security fix. #3727 (@rodboev, #1909): enforced CSP now honors the same connect-src as report-only (built from one shared template). Full suite 8205 passed, Codex SAFE (live-verified headers), Opus SHIP. Co-authored-by: rodboev <rodboev@users.noreply.github.com>	2026-06-07 10:52:07 -07:00
Frank Song	3ee0173cd3	feat(server): allow extra CSP connect sources	2026-05-25 21:48:52 +08:00