Lucas Fernandes Nogueira 1198a524b7 Merge commit from fork ...

Checks the URL scope on every hop of a redirect chain instead of only on the URL requested by the frontend.
Without it, a server on an allowed origin can redirect the request to any other origin - including `localhost` services, internal hosts and cloud metadata endpoints - and the plugin follows it, returning the response to the webview.

2026-09-19 21:01:48 -03:00

..

index.ts

Merge commit from fork

2026-09-19 21:01:48 -03:00