Repository navigation

feat(web): limit Infra embeds to the app's allowed sites - #4205

Merged

richiemcilroy merged 8 commits into

mainfrom

feat/infra-embed-allowed-domains

Nov 13, 2026

Merged

feat(web): limit Infra embeds to the app's allowed sites#4205
richiemcilroy merged 8 commits into
mainfrom
feat/infra-embed-allowed-domains

Commits on Nov 13, 2026
- feat(web): limit Infra embeds to the app's allowed sites
  Richie McIlroy
  committed
  35549f4
- fix(web): accept only https sites, or localhost, as allowed embed sites
  Richie McIlroy
  committed
  fce00e5
- feat(web): bring back the allowed sites list in Cap Infra settings
  Richie McIlroy
  committed
  29d0a92
- docs: say the allowed sites list controls who can embed the player
  Richie McIlroy
  committed
  6b0ee06
- perf(web): keep each embed's allowed sites for a minute per instance
  Richie McIlroy
  committed
  36edd70
- fix(web): restrict every address that serves the embed
  Richie McIlroy
  committed
  9a1f783
- fix(web): remove allowed sites through the shared Effect runtime
  Richie McIlroy
  committed
  93788a8
- Merge branch 'main' into feat/infra-embed-allowed-domains
  richiemcilroy
  authored
  40f2dfb