clawbot 02847eea92 fix: restrict CORS to configured origins (closes #40) ... - Add CORSOrigins config field (UPAAS_CORS_ORIGINS env var) - Default to same-origin only (no CORS headers when unconfigured) - When configured, allow specified origins with AllowCredentials: true - Add tests for CORS middleware behavior		2026-02-19 13:45:18 -08:00
..
app	fix: use hashed webhook secrets for constant-time comparison	2026-02-15 14:06:53 -08:00
auth	fix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes #39)	2026-02-15 22:07:57 -08:00
deploy	fix: restrict CORS to configured origins (closes #40)	2026-02-19 13:45:18 -08:00
notify	Add commit URL to Slack notifications with link and backtick formatting	2025-12-31 16:29:22 -08:00
webhook	fix: cancel in-progress deploy when webhook triggers new deploy (closes #38)	2026-02-15 22:12:03 -08:00