4grayandClaude Fable 5 552923fd55 fix(electron): strip credentials on same-host https-to-http downgrades ...

Review follow-up (Greptile P1 + Codex on #1322): the host-only check
kept Authorization/Cookie/basic auth/params/body when an https request
was redirected to http on the same host, replaying a TLS-obtained
session in cleartext. Treat that downgrade like a host change: strip
credentials and refuse to replay request bodies. Scheme upgrades and
port moves on the same host keep headers — the actual #1158 scenarios.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-01 13:27:47 +02:00

..

category-management.md

docs: sync CLAUDE.md, AGENTS.md and architecture docs with actual code

2026-07-24 08:16:33 +02:00

date-handling.md

fix(xtream): ignore future recently added dates

2026-05-19 14:39:38 +02:00

dependency-security-overrides.md

fix(deps): patch transitive runtime CVEs via pnpm overrides (#1258)

2026-07-26 02:21:11 +02:00

download-manager.md

feat(downloads): pause and resume support for the download manager (#1147)

2026-07-24 18:40:30 +02:00

electron-security.md

fix(electron): strip credentials on same-host https-to-http downgrades

2026-08-01 13:27:47 +02:00

embedded-inline-playback.md

fix(playback): structure Shaka diagnostics (#1318)

2026-07-31 21:25:06 +02:00

embedded-mpv-native.md

fix(packaging): stop the Linux frame-copy probe timing out on cold sandboxes (#1294)

2026-07-27 21:34:31 +02:00

iptvnator-ui-guidelines.md

fix(ui): preserve EPG in narrow channel rows (#1312)

2026-07-31 08:27:36 +02:00

m3u-playlist-module.md

fix(playback): structure Shaka diagnostics (#1318)

2026-07-31 21:25:06 +02:00

navigation-ux-analysis.md

docs: update navigation and dashboard documentation for clarity and accuracy

2026-04-22 22:24:27 +02:00

nx-workspace-boundaries.md

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00

player-controls-contract.md

fix(playback): make the "Show subtitles" setting reach the web players (#1269)

2026-07-26 09:26:40 +02:00

playlist-backup-restore.md

feat(portals): find the same movie in your other playlists (#1286)

2026-07-29 21:53:42 +02:00

portal-detail-navigation.md

docs: sync CLAUDE.md, AGENTS.md and architecture docs with actual code

2026-07-24 08:16:33 +02:00

pwa-self-hosted.md

build(docker): move image to node 24 and install pnpm without corepack (#1265)

2026-07-26 19:54:52 +02:00

remote-control.md

refactor(settings): split the settings page into per-section facades (#1274)

2026-07-26 22:57:16 +02:00

sqlite-db-worker.md

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00

stalker-epg.md

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00

stalker-mock-server.md

feat(mock-data): add shared screenshot-safe poster catalog (#1271)

2026-07-27 08:10:57 +02:00

stalker-portal.md

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00

stalker-store-api-baseline.md

perf(stalker): skip wasted series-seasons request for non-series items (#1241)

2026-07-25 16:54:30 +02:00

tmdb-metadata-enrichment.md

fix(tmdb): series cast was the latest season only, not the show (#1242)

2026-07-26 01:55:44 +02:00

tmdb-roadmap.md

docs(tmdb): record the TMDB capability roadmap (#1238)

2026-07-25 15:57:25 +02:00

validation-map.md

feat(portals): find the same movie in your other playlists (#1286)

2026-07-29 21:53:42 +02:00

vod-multi-source.md

fix(portals): restore fresh-import pins atomically (#1311)

2026-07-30 07:40:03 +02:00

workspace-dashboard.md

docs: sync CLAUDE.md, AGENTS.md and architecture docs with actual code

2026-07-24 08:16:33 +02:00

workspace-shell.md

chore(deps): bump the npm minor/patch group across 43 packages (#1270)

2026-07-26 19:43:35 +02:00

xtream-mock-server.md

test(performance): prevent renderer heartbeat omission (#1308)

2026-07-29 13:58:44 +02:00

xtream-portal-compatibility.md

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00