mirror of
https://github.com/HeyPuter/puter.git
synced 2026-08-12 09:11:54 +00:00
Sam AtkinsandEric Dubé
e2ea57fcf9
Having the parent app send us arbitrary config values was a holdover from when phoenix was an embedded iframe and not a separate app. It led to a security issue previously. Let's only take the auth parameters since we can't get those otherwise, and they're safe to read. Everything else should be available in our own URL params.