Anders Kaseorg c40bd39a01 webpack: Disable cross-origin-header-check middleware. ...

This middleware in webpack-dev-server 5.2.1 appears to be intended to
plug some undisclosed browser-specific vulnerability that allows
stealing code from closed-source projects.

https://github.com/webpack/webpack-dev-server/issues/5446#issuecomment-2768816082
https://github.com/webpack/webpack-dev-server/issues/5446#issuecomment-2772150109

Signed-off-by: Anders Kaseorg <anders@zulip.com>

2025-04-15 16:18:06 -07:00

11 KiB

Raw Blame History

View Raw