Elias El Khoury 32fd309e5d fix: remove overly broad CORS origin regex ...

The pattern /worldmonitor.*\.vercel\.app/ matched any Vercel deployment
with a "worldmonitor" prefix, allowing unauthorized origins to bypass
CORS and consume server-side API keys. The owner-scoped pattern on the
previous line already covers all legitimate preview deployments.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 10:58:53 +02:00

..

data

Add ADS-B Exchange military aircraft database

2026-01-27 08:21:20 +04:00

eia

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

pizzint

fix: settings UX — save verified keys, preserve inputs across renders, bump v2.3.2

2026-02-15 23:33:19 +04:00

wingbits

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

youtube

fix: harden CORS patterns & URL validation

2026-02-15 21:34:00 +04:00

_cache-telemetry.js

Optimize proxy usage with AIS snapshots, Upstash caching, and telemetry

2026-02-11 19:06:00 +04:00

_cors.js

fix: remove overly broad CORS origin regex

2026-02-16 10:58:53 +02:00

_cors.test.mjs

Fix Tauri desktop runtime reliability and settings UX

2026-02-13 23:05:51 +04:00

_ip-rate-limit.js

Optimize proxy usage with AIS snapshots, Upstash caching, and telemetry

2026-02-11 19:06:00 +04:00

_upstash-cache.js

perf: harden regression guardrails in CI, cache, and map clustering

2026-02-15 08:45:49 +04:00

acled-conflict.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

acled.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

ais-snapshot.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

arxiv.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

cache-telemetry.js

Optimize proxy usage with AIS snapshots, Upstash caching, and telemetry

2026-02-11 19:06:00 +04:00

classify-batch.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

classify-event.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

climate-anomalies.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

cloudflare-outages.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

coingecko.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

country-intel.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

cyber-threats.js

feat: dramatically increase cyber threat map density

2026-02-15 17:40:01 +04:00

cyber-threats.test.mjs

feat: add C2IntelFeeds, OTX, and AbuseIPDB as cyber threat sources

2026-02-15 17:06:14 +04:00

debug-env.js

Harden CORS, XSS, and input validation across all API endpoints and components

2026-02-11 14:35:07 +04:00

download.js

Add download redirect API for platform-specific installers

2026-02-15 10:28:52 +04:00

earthquakes.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

etf-flows.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

faa-status.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

finnhub.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

firms-fires.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

fred-data.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

fwdstart.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

gdelt-doc.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

gdelt-geo.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

github-trending.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

groq-summarize.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

hackernews.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

hapi.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

macro-signals.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

nga-warnings.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

og-story.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

openrouter-summarize.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

opensky.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

polymarket.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

risk-scores.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

rss-proxy.js

chore: add PR #71 think tank domains to RSS proxy allowlist

2026-02-15 23:42:06 +04:00

service-status.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

stablecoin-markets.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

stock-index.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

story.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

tech-events.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

temporal-baseline.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

theater-posture.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

ucdp-events.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

ucdp.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

unhcr-population.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

worldbank.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

worldpop-exposure.js

Reduce egress costs, add PWA support, fix Polymarket and Railway relay

2026-02-14 19:53:04 +04:00

yahoo-finance.js

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00