user e241b99d22 remove suffix matching from host whitelist ...

Signatures are per-URL, so the whitelist should only support exact host
matches. Remove the suffix/wildcard matching that allowed patterns like
'.example.com' to bypass signature requirements for entire domain trees.

Leading dots in existing config entries are now stripped, so '.example.com'
becomes 'example.com' as an exact match (backwards-compatible normalisation).

2026-03-17 01:55:19 -07:00

918 B

Raw Permalink Blame History

View Raw