Commit Graph

1 Commits

Author SHA1 Message Date
Source Open
a3d6b17a19 fix(share): lock bundle fetches to the configured publisher (#1241)
Keep server-side share publish and fetch traffic on the configured OpenWork publisher so bundle links cannot steer host requests to arbitrary targets. Add a warning-backed client-side fallback for manual imports from untrusted bundle URLs.

Co-authored-by: src-opn <src-opn@users.noreply.github.com>
2026-03-30 17:38:31 -07:00