Skip to content

tokmon v0.28.1

Choose a tag to compare

@DavidIlie DavidIlie released this 13 Jul 16:57

What changed

  • Added an allowedHosts config option for exact DNS hostnames used by ingresses and reverse proxies.
  • Added Allowed hosts editors to both the terminal and web settings UIs.
  • Applied the allowlist to HTTP and WebSocket Host-header guards while preserving network-mode and same-origin checks.
  • DNS names are normalized, deduplicated, and matched exactly; schemes, ports, paths, and wildcards are rejected.

Enable Network access, add the ingress hostname (for example, tokmon.example.com), then restart the daemon.

Install with npm install -g tokmon@0.28.1 or run npx tokmon@0.28.1.