clawbot 432342e963 Stop allowing credentialed cross-origin requests (closes #261) ...

CORS() allowed every origin with credentials, so a page on another
origin of the same site could read what the signed-in user sees. It
now uses the options of the CONVENTIONS.md template: every origin as
*, no credentials, and the template's request headers. corsMaxAge
stays, since AGENTS.md asks for named constants.

Model: opus-5-5

2026-11-10 22:25:40 +00:00

..

broker

Remove the relay's broker wait channel after each tick (closes #151)

2026-10-20 18:02:03 +02:00

cli

Show square brackets in the neoirc-cli message window as written (closes #233)

2026-11-02 08:30:56 +01:00

config

Honour forwarded headers only from trusted proxies (closes #259)

2026-11-10 22:41:50 +01:00

db

Remove the unused GetSessionChannelIDs from the db package (closes #254)

2026-11-03 12:38:42 +01:00

dbtest

Move the test-only helpers out of the shipped db package (closes #248)

2026-11-03 11:59:17 +01:00

globals

feat: implement IRC numerics batch 2 — connection registration, channel ops, user queries (#59)

2026-03-10 00:53:46 +01:00

handlers

Honour forwarded headers only from trusted proxies (closes #259)

2026-11-10 22:41:50 +01:00

hashcash

Spend a hashcash stamp only when the request succeeds (closes #158)

2026-10-21 04:02:06 +02:00

healthcheck

Change module path to sneak.berlin/go/neoirc (#99)

2026-04-01 23:05:41 +02:00

ircserver

Move the test-only helpers out of the shipped db package (closes #248)

2026-11-03 11:59:17 +01:00

logger

Change module path to sneak.berlin/go/neoirc (#99)

2026-04-01 23:05:41 +02:00

middleware

Stop allowing credentialed cross-origin requests (closes #261)

2026-11-10 22:25:40 +00:00

ratelimit

Change module path to sneak.berlin/go/neoirc (#99)

2026-04-01 23:05:41 +02:00

server

Stop allowing credentialed cross-origin requests (closes #261)

2026-11-10 22:25:40 +00:00

service

Move the test-only helpers out of the shipped db package (closes #248)

2026-11-03 11:59:17 +01:00

stats

Change module path to sneak.berlin/go/neoirc (#99)

2026-04-01 23:05:41 +02:00