hobokenchicken 118155d737 fix: support DUMPSTER_CSRF_ORIGINS env var for LAN access ...

The CSRF middleware was rejecting requests from LAN IPs because
cfg.Host defaults to 'localhost' which doesn't match the LAN IP.

Now supports DUMPSTER_CSRF_ORIGINS env var (comma-separated list of
full origins) for additional trusted origins beyond cfg.Host.

Removed debug logging from CSRF middleware.

2026-06-29 13:20:07 -04:00

..

main.go

fix: support DUMPSTER_CSRF_ORIGINS env var for LAN access

2026-06-29 13:20:07 -04:00