Files
Tommy D. Rossi f14680ef38 Protect relay metadata behind configured authentication
Move the MCP log route below its authentication middleware so token mode rejects unauthenticated log writes. Require configured tokens on extension status and CDP discovery metadata routes while preserving normal authless localhost access.

Add regression coverage for authenticated and authless modes. Correct the security documentation to explain default automatic blank-tab creation, add a patch changeset, and bump the extension manifest to 0.0.119.

Session: ses_fd1b922c7ffe3ekUGs0pOBZulQ
2026-08-23 14:26:18 +02:00
..