Max Johnson 19b887128e app-server: reject websocket requests with Origin headers (#14995) ...

Reject websocket requests that carry an `Origin` header

2026-03-18 00:24:53 +00:00

..

account.rs

…

analytics.rs

…

app_list.rs

…

collaboration_mode_list.rs

…

command_exec.rs

…

compaction.rs

…

config_rpc.rs

…

connection_handling_websocket_unix.rs

…

connection_handling_websocket.rs

app-server: reject websocket requests with Origin headers (#14995)

2026-03-18 00:24:53 +00:00

dynamic_tools.rs

…

experimental_api.rs

…

experimental_feature_list.rs

…

fs.rs

…

initialize.rs

…

mcp_server_elicitation.rs

…

mod.rs

…

model_list.rs

…

output_schema.rs

…

plan_item.rs

…

plugin_install.rs

feat: Add product-aware plugin policies and clean up manifest naming (#14993)

2026-03-17 17:01:34 -07:00

plugin_list.rs

feat: Add product-aware plugin policies and clean up manifest naming (#14993)

2026-03-17 17:01:34 -07:00

plugin_read.rs

feat: Add product-aware plugin policies and clean up manifest naming (#14993)

2026-03-17 17:01:34 -07:00

plugin_uninstall.rs

feat: support remote_sync for plugin install/uninstall. (#14878)

2026-03-16 21:37:27 -07:00

rate_limits.rs

…

realtime_conversation.rs

Unify realtime shutdown in core (#14902)

2026-03-17 15:58:52 -07:00

request_permissions.rs

…

request_user_input.rs

…

review.rs

…

safety_check_downgrade.rs

…

skills_list.rs

…

thread_archive.rs

…

thread_fork.rs

…

thread_list.rs

…

thread_loaded_list.rs

…

thread_metadata_update.rs

…

thread_name_websocket.rs

…

thread_read.rs

…

thread_resume.rs

…

thread_rollback.rs

…

thread_start.rs

…

thread_status.rs

…

thread_unarchive.rs

…

thread_unsubscribe.rs

…

turn_interrupt.rs

…

turn_start_zsh_fork.rs

…

turn_start.rs

feat: show effective model in spawn agent event (#14944)

2026-03-17 16:58:58 +00:00

turn_steer.rs

…

windows_sandbox_setup.rs

…