chore(SFLW-51): allow loopback dev origins so dashboard WebSocket connects in dev mode#38

Merged

lbruton merged 6 commits into

mainfrom

Jun 15, 2026

Commits on Jun 15, 2026

chore(SFLW-51): allow loopback dev origins so dashboard WebSocket connects in dev mode
lbruton
committed
chore(SFLW-51): tighten isLoopbackOrigin to strict 127.0.0.0/8 (Copilot review)
lbruton
committed
chore(SFLW-51): tighten isLocalhostAddress at the root to strict 127.0.0.0/8
lbruton
committed
chore(SFLW-51): gate CORS loopback relaxation on allowlist + configurable proxy host (Copilot review)
lbruton
committed
chore(SFLW-51): dedup getCorsConfig tests to clear Codacy duplication gate
lbruton
committed
chore(SFLW-51): grammar fix in vite proxy host comment (Copilot review)
lbruton
committed