Zack Tanner b2b802c043 block disallowed dev origins by default (#91507) ...

This removes the warn-only default behavior and enforces the dev-origin guard by default. Cross-origin requests to internal dev resources now block unless they match the built-in local allowlist or an explicit `allowedDevOrigins` entry. The tests are expanded to cover default blocking, configured-but-not-allowlisted hosts, missing Referer in the no-cors path, and same-site requests without an Origin, and the docs are updated to match the new behavior.

2026-03-17 16:02:33 -07:00

..

01-app

block disallowed dev origins by default (#91507)

2026-03-17 16:02:33 -07:00

02-pages

Move adapterPath from experimental to stable top-level config (#91535)

2026-03-17 23:28:08 +01:00

03-architecture

Fix typo in Fast Refresh documentation (#85352)

2025-10-27 18:14:45 +00:00

04-community

Next CLI flags documentation (#89750)

2026-02-11 20:15:04 +01:00

index.mdx

Add eval and docs for unstable_instant (#91334)

2026-03-13 23:02:04 -04:00