molecule-ai[bot] 5b42bd76b5 Merge pull request #629 from Molecule-AI/fix/issue-614-security-headers ... Merge gate passed (all 7 gates). Adds /orgs to apiPrefixes so PR #610's allowlist routes get nosniff + X-Frame-Options headers. One-line fix + 50 lines of regression tests. UNSTABLE = known App token scope gap.		2026-04-17 06:18:25 +00:00
..
ratelimit_test.go	fix(router): call SetTrustedProxies(nil) to close IP-spoofing bypass (#179)	2026-04-15 17:32:54 +00:00
ratelimit.go	fix: #93 category_routing + #105 X-RateLimit headers	2026-04-15 00:23:46 -07:00
securityheaders_test.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
securityheaders.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
tenant_guard_test.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
tenant_guard.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
wsauth_middleware_test.go	fix(security): remove canvasOriginAllowed from AdminAuth middleware (#623)	2026-04-17 06:00:45 +00:00
wsauth_middleware.go	Merge pull request #628 from Molecule-AI/fix/issue-623-adminauth-origin-bypass	2026-04-17 06:13:33 +00:00