Elie Habib 524e3d4c25 fix: resolve bootstrap 401 and 429 rate limiting on page init (#512) ...

Same-origin browser requests don't send Origin header (per CORS spec),
causing validateApiKey to reject them. Extract origin from Referer as
fallback. Increase rate limit from 60 to 200 req/min to accommodate
the ~50 requests fired during page initialization.

2026-02-28 12:52:43 +04:00

..

[domain]/v1

feat(conflict): add Iran Attacks map layer + strip debug logs (#511)

2026-02-28 12:39:48 +04:00

data

Proto-first API rebuild: sebuf contracts, handlers, gateway, and generated docs (#106)

2026-02-21 03:39:56 +04:00

eia

fix: security hardening — CORS, auth bypass, origin validation & bump v2.2.7

2026-02-15 20:33:20 +04:00

youtube

fix+feat: RSS feed repairs, HLS native playback, summarization cache fix, embed improvements (#452)

2026-02-27 13:55:06 +04:00

_api-key.js

fix: resolve bootstrap 401 and 429 rate limiting on page init (#512)

2026-02-28 12:52:43 +04:00

_cors.js

feat: API key gating for desktop cloud fallback + registration (#215)

2026-02-21 10:36:23 +00:00

_cors.test.mjs

Fix Tauri desktop runtime reliability and settings UX

2026-02-13 23:05:51 +04:00

ais-snapshot.js

Harden Railway relay auth, caching, and proxy routing (#320)

2026-02-24 20:24:20 +04:00

bootstrap.js

perf: bootstrap endpoint + polling optimization (#495)

2026-02-28 08:25:25 +04:00

download.js

feat: add ARM64 Linux build target and download detection (#427)

2026-02-26 20:52:44 +04:00

fwdstart.js

Proto-first API rebuild: sebuf contracts, handlers, gateway, and generated docs (#106)

2026-02-21 03:39:56 +04:00

loaders-xml-wms-regression.test.mjs

Build/runtime hardening and dependency security updates (#286)

2026-02-24 08:21:03 +00:00

og-story.js

fix(api): sanitize og-story level input (#219)

2026-02-22 03:19:01 +04:00

og-story.test.mjs

fix(api): sanitize og-story level input (#219)

2026-02-22 03:19:01 +04:00

opensky.js

fix: reduce upstream API pressure with cache TTL optimization (#430)

2026-02-26 21:24:32 +04:00

polymarket.js

Harden Railway relay auth, caching, and proxy routing (#320)

2026-02-24 20:24:20 +04:00

register-interest.js

feat: API key gating for desktop cloud fallback + registration (#215)

2026-02-21 10:36:23 +00:00

rss-proxy.js

feat(rss): add Axios (api.axios.com/feed) as US news source (#494)

2026-02-28 07:54:25 +04:00

story.js

Proto-first API rebuild: sebuf contracts, handlers, gateway, and generated docs (#106)

2026-02-21 03:39:56 +04:00

telegram-feed.js

feat: HappyMonitor — positive news dashboard (happy.worldmonitor.app) (#229)

2026-02-25 10:05:26 +04:00

version.js

Proto-first API rebuild: sebuf contracts, handlers, gateway, and generated docs (#106)

2026-02-21 03:39:56 +04:00