Skip to content

registry: require a header on the mutating routes - #39

Merged
s23b merged 1 commit into
dark-bio:mainfrom
s23b:cors-fix
Sep 29, 2026
Merged

s23b merged 1 commit into
dark-bio:mainfrom
s23b:cors-fix

Conversation

@s23b

@s23b s23b commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

Fixes #23.

Mutating routes now require the X-Ark-Registry: 1 header, and reject requests carrying an Origin header.

@s23b
s23b merged commit a98e1e9 into dark-bio:main Sep 29, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

registry: require a header on the mutating routes so a web page cannot change it

1 participant