hobokenchicken 118155d737 fix: support DUMPSTER_CSRF_ORIGINS env var for LAN access ...

The CSRF middleware was rejecting requests from LAN IPs because
cfg.Host defaults to 'localhost' which doesn't match the LAN IP.

Now supports DUMPSTER_CSRF_ORIGINS env var (comma-separated list of
full origins) for additional trusted origins beyond cfg.Host.

Removed debug logging from CSRF middleware.

2026-06-29 13:20:07 -04:00

..

migrate

Profiles, Giphy, uploads, settings UI

2026-06-28 16:06:08 -04:00

server

fix: support DUMPSTER_CSRF_ORIGINS env var for LAN access

2026-06-29 13:20:07 -04:00

tui

security: remediate all P0-P2 audit findings (12 tasks)

2026-06-29 09:30:50 -04:00