tokmon v0.28.1
What changed
- Added an
allowedHostsconfig option for exact DNS hostnames used by ingresses and reverse proxies. - Added Allowed hosts editors to both the terminal and web settings UIs.
- Applied the allowlist to HTTP and WebSocket Host-header guards while preserving network-mode and same-origin checks.
- DNS names are normalized, deduplicated, and matched exactly; schemes, ports, paths, and wildcards are rejected.
Enable Network access, add the ingress hostname (for example, tokmon.example.com), then restart the daemon.
Install with npm install -g tokmon@0.28.1 or run npx tokmon@0.28.1.