Skip to content

@cloudflare/edge-preview-authenticated-proxy@0.3.5

Choose a tag to compare

View all tags
@workers-devprod workers-devprod released this 09 Nov 15:07
· 51 commits to main since this release
Immutable release. Only release title and notes can be modified.
@cloudflare/edge-preview-authenticated-proxy@0.3.5
bf3ec7b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • #16797 1e1752e Thanks @lokeshramchand-ctrl! - Restrict the /.update-preview-token redirect to same-origin paths

    Previously, the suffix query parameter was copied into the Location header unchanged, so the endpoint could redirect the browser to any other site (for example https://…, //… or /\…). The suffix is now resolved against the request URL, and anything that would leave the current origin falls back to /.

Assets 3
Loading