Anders Kaseorg c40bd39a01 webpack: Disable cross-origin-header-check middleware. ...

This middleware in webpack-dev-server 5.2.1 appears to be intended to
plug some undisclosed browser-specific vulnerability that allows
stealing code from closed-source projects.

https://github.com/webpack/webpack-dev-server/issues/5446#issuecomment-2768816082
https://github.com/webpack/webpack-dev-server/issues/5446#issuecomment-2772150109

Signed-off-by: Anders Kaseorg <anders@zulip.com>

2025-04-15 16:18:06 -07:00

..

e2e-tests

personal-settings: Redesign buttons in personal settings.

2025-04-10 11:32:43 -07:00

generated

…

html

web: Sync content of Django and nginx error pages.

2025-04-03 17:09:46 -07:00

images

…

server

…

shared

personal-settings: Redesign buttons in personal settings.

2025-04-10 11:32:43 -07:00

src

banner: Prevent duplicate desktop notification banners.

2025-04-15 16:09:09 -07:00

styles

message_feed UI: Update logo dimensions for better scalability.

2025-04-11 17:02:08 -07:00

templates

streams: Fix warning shown when unsubscribing from private stream.

2025-04-14 09:24:53 -07:00

tests

settings: Fix opening settings for guests who cannot access all users.

2025-04-14 11:44:11 -07:00

third

bootstrap: Remove vendor-prefixed placeholders.

2025-04-03 13:35:06 -07:00

.browserslistrc

…

.gitignore

…

babel.config.js

dependencies: Upgrade JavaScript dependencies.

2025-03-14 18:32:23 -07:00

debug-require-webpack-plugin.ts

…

debug-require.cjs

…

postcss.config.js

…

webpack.assets.json

…

webpack.config.ts

webpack: Disable cross-origin-header-check middleware.

2025-04-15 16:18:06 -07:00

webpack.dev-assets.json

…