Stéphane Graber 22250ad42e shared/ws: Remove CheckOrigin bypass ... We've apparently always turned off this particular safety check but can't find a good reason for that as all complex Websocket operations are done outside of the browser. For browser-based interactions, the default behavior of enforcing an Origin match seems quite appropriate. Reported-by: https://7asecurity.com Signed-off-by: Stéphane Graber <stgraber@stgraber.org>		2026-03-27 14:03:54 -04:00
..
api	shared/api: Add InstanceDebugRepairPost	2026-03-12 00:18:07 -04:00
archive	shared/archive: Fix crash on nil tracker	2026-03-11 23:33:38 -04:00
ask	shared/ask: Don't needlessly use format string functions	2025-08-11 01:12:58 -04:00
cancel	shared/cancel: Don't needlessly use format string functions	2025-08-11 01:12:57 -04:00
cgo	incusd/main_forkbpf: Create forkbpf helper for bpf token delegation.	2026-03-11 22:49:58 -04:00
cliconfig	shared/cliconfig: Add lock to prevent panic	2026-03-12 00:13:48 -04:00
cmd	incus: Refactor CLI usage strings	2026-03-11 23:56:56 -04:00
idmap	shared/idmap: Skip xattrs on EINVAL	2026-03-11 22:16:48 -04:00
ioprogress	shared/ioprogress: Cap download speed to file size	2026-03-11 23:31:56 -04:00
logger	shared/logger: Don't needlessly use format string functions	2025-08-11 01:12:53 -04:00
osarch	shared/osarch: Add aliases for the various x86_64 versions	2026-03-11 22:57:33 -04:00
proxy	shared/proxy: Make golangci-lint clean	2025-08-09 23:44:32 -04:00
resources	shares/resources/usbid: Only load the database once	2026-03-11 23:28:14 -04:00
revert	shared/revert: Make golangci-lint clean	2025-08-09 23:44:31 -04:00
scriptlet	shared/scriptlet: Move scriptlet utils to shared	2025-08-12 22:57:22 -04:00
simplestreams	shared/simplestreams: Don't needlessly use format string functions	2025-08-11 01:12:52 -04:00
subprocess	shared/subprocess: Don't needlessly use format string functions	2025-08-11 01:12:51 -04:00
tcp	shared/tcp: Don't needlessly use format string functions	2025-08-11 01:12:50 -04:00
termios	shared/termios: Fix gofumpt	2025-03-28 16:58:04 -04:00
tls	shared/tls: Support multiple domains in ACME functions	2026-03-12 00:13:25 -04:00
units	shared/units: Ends all comments with a full-stop.	2022-06-28 10:27:20 +01:00
util	shared/util: Fix SingleQuote to actually quote	2026-03-11 23:50:11 -04:00
validate	shared/validate: Allow a specific set of compressors	2026-03-11 23:59:19 -04:00
ws	shared/ws: Remove CheckOrigin bypass	2026-03-27 14:03:54 -04:00