Juan Fernando CastroandDaniel Salazar e18a5c2b54 fix(apps): refuse claimed subdomains as app index_url hosts (PUT-2110) (#4267) ...

index_url may not point at a system host: the origin, the api host, or a
subdomain an extension has claimed. App create and update now apply the
same refusal to `<claimed>.<domain>` (any case, any port) that they apply
to the origin and api hosts.

The host-to-claim match is a new exported `subdomainLabelOf` in
hostRedirects, also used by the claim dispatch middleware, so both
decide the same way.

Co-authored-by: Daniel Salazar <daniel.salazar@puter.com>

2026-10-21 13:19:31 -04:00

..

http

fix(apps): refuse claimed subdomains as app index_url hosts (PUT-2110) (#4267)

2026-10-21 13:19:31 -04:00

actor.guards.test.ts

refactor(drivers-wiring): AppService views and launch gates, batched app lookups, shared driver policy and guards (#4186)

2026-10-11 22:04:23 -07:00

actor.test.ts

fix: misc events and kv issues found during recipes (#3997)

2026-09-30 14:40:47 -07:00

actor.ts

refactor(drivers-wiring): AppService views and launch gates, batched app lookups, shared driver policy and guards (#4186)

2026-10-11 22:04:23 -07:00

context.test.ts

fix(puter-js): request idle timeout, callback/listener leaks, guarded message handlers (PUT-1908) (#4143)

2026-10-09 00:07:20 -07:00

context.ts

fix(puter-js): request idle timeout, callback/listener leaks, guarded message handlers (PUT-1908) (#4143)

2026-10-09 00:07:20 -07:00

index.ts

fix: hardening (#3904)

2026-09-18 11:22:39 -07:00

reputation.test.ts

…

reputation.ts

…

storageOps.test.ts

…

storageOps.ts

…