Update
Jan 20, 2025
tracked by
Updatify
6.0.9 (2025-01-20)
⚠ BREAKING CHANGES
-
check host header to prevent DNS rebinding attacks and introduce
server.allowedHosts (bd896fb)
-
default
server.cors: false to disallow fetching from untrusted origins (b09572a)
Bug Fixes
-
check host header to prevent DNS rebinding attacks and introduce
server.allowedHosts (bd896fb)
-
default
server.cors: false to disallow fetching from untrusted origins (b09572a)
-
verify token for HMR WebSocket connection (029dcd6)