forked from farhoodlabs/paperclip
85c0b9a3dc3795bf33646ef128ad070181c7abec
Reject requests from unrecognised Host headers when running authenticated/private. Adds server middleware, CLI `allowed-hostname` command, config-schema field, and prompt support for configuring allowed hostnames during onboard/configure. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Description
Languages
TypeScript
97.9%
JavaScript
1.1%
Shell
0.7%
CSS
0.2%