Dw Domain Viewer
repo: ~/Projects/dw-domain-viewer · 4 commits · 0 in last 24h, 0 in last 7d ·
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
54a7eaa · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
File tree
6 files tracked. Click any to browse the source at HEAD.
rendered in 0ms