Repository navigation

fix(studio-server): reject cross-origin state-changing requests - #6128

Open

Dextheking1 wants to merge 6 commits into

heygen-com:mainfrom

Dextheking1:fix/studio-api-cross-origin-writes

Open

fix(studio-server): reject cross-origin state-changing requests#6128
Dextheking1 wants to merge 6 commits into
heygen-com:mainfrom
Dextheking1:fix/studio-api-cross-origin-writes

Commits on Oct 23, 2026
- fix(studio-server): reject cross-origin state-changing requests
  Dextheking1
  committed
  42574a7
Commits on Oct 24, 2026
- fix(studio): guard API writes with the shared sameOriginPost predicate
  Dextheking1
  committed
  110a300
- fix(studio): scheme-aware origin check, allowedHosts option
  Dextheking1
  committed
  89011e1
Commits on Oct 26, 2026
- chore: raise studio-server packed size budget for request-identity export
  Dextheking1
  committed
  41c6626
- Merge main into fix/studio-api-cross-origin-writes
  Dextheking1
  committed
  8b9841c
Commits on Oct 27, 2026
- feat(studio-server): read extra write hosts from HYPERFRAMES_PREVIEW_ALLOWED_HOSTS
  Dextheking1
  committed
  27193bb