Source Open a3d6b17a19 fix(share): lock bundle fetches to the configured publisher (#1241) ...

Keep server-side share publish and fetch traffic on the configured OpenWork publisher so bundle links cannot steer host requests to arbitrary targets. Add a warning-backed client-side fallback for manual imports from untrusted bundle URLs.

Co-authored-by: src-opn <src-opn@users.noreply.github.com>

2026-03-30 17:38:31 -07:00

8.9 KiB

Raw Blame History

View Raw