Feature Harvest
repo: ~/Projects/feature-harvest · 6 commits · 0 in last 24h, 0 in last 7d ·
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
fc03b8f · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
File tree
9 files tracked. Click any to browse the source at HEAD.
rendered in 2ms