24a617c24f
The allowlist should be origin domains that are allowed to send the requests, not the list of forwarded hosts (i.e. reverse proxies). |
||
---|---|---|
.. | ||
safe-origins | ||
unsafe-origins | ||
app-action-allowed-origins.test.ts | ||
app-action-disallowed-origins.test.ts |