mirror of
https://github.com/tauri-apps/plugins-workspace.git
synced 2026-11-11 23:29:55 +01:00
Checks the URL scope on every hop of a redirect chain instead of only on the URL requested by the frontend. Without it, a server on an allowed origin can redirect the request to any other origin - including `localhost` services, internal hosts and cloud metadata endpoints - and the plugin follows it, returning the response to the webview.