4 Commits

Author	SHA1	Message	Date
Michael Hart	6a68fd1c94	fix: harden origin validation and proxy request handling (#571) ... * Treat `Origin: "null"` as an explicit cross-origin value Also strip Transfer-Encoding * Further hardening * Add Vite HMR websocket token regression tests Verify that websocket upgrades with an Origin header are rejected when the HMR token is missing or invalid, and accepted when the token matches the value exposed by @vite/client. * Add clarifying comment and share a single dev server	2026-03-16 21:24:23 -05:00
Stephen Zhou	c17d6941be	chore: migrate to vite plus (#535) ... * chore: migrate to vite plus * Disable typeAware and typeCheck * Update CI * Fix CI * Fix test * Clean * Run test with vp * Try revert * react: false In test * Fix test * Revert "Try revert" This reverts commit 009da10473. * Update * Update * Try revert ci changes * revert * Run vp migrate * Disable typeAware and typeCheck for now * Better resolve for test * Use vp dev instead of vite * Update expect * Fix NormalizeManifestModuleId * Try increase timeout * Update to use vp * Try new check * Bring back npx vp * Migrate CI * Make next-intl resolvable * Update * Update * Update	2026-03-15 10:50:13 +00:00
James Anderson	764a496ce7	add oxfmt formatter (#380) ... * add oxfmt formatter: config, scripts, CI, editor setup, docs * rebuild lockfile * fix: add Format to required checks list, remove dead ignore pattern * run fmt * add format to agents.md again	2026-03-09 14:56:14 +00:00
Steve Faulkner	16988a5403	fix: add request validation to dev server (#98)	2026-02-25 22:51:16 -06:00