Skip to content

Allow requests to the runtime proxy from any origin#8689

Merged
begelundmuller merged 1 commit intomainfrom
begelundmuller/runtime-proxy-cors-any-origin
Jan 23, 2026
Merged

Allow requests to the runtime proxy from any origin#8689
begelundmuller merged 1 commit intomainfrom
begelundmuller/runtime-proxy-cors-any-origin

Conversation

@begelundmuller
Copy link
Copy Markdown
Contributor

Allows cross-origin requests specifically and only to the runtime proxy. Avoids security issues by disabling cookies on such requests (so clients must explicitly pass a valid Authorization header unless it's a public project).

Checklist:

  • Covered by tests
  • Ran it and it works as intended
  • Reviewed the diff before requesting a review
  • Checked for unhandled edge cases
  • Linked the issues it closes
  • Checked if the docs need to be updated. If so, create a separate Linear DOCS issue
  • Intend to cherry-pick into the release branch
  • I'm proud of this work!

@begelundmuller begelundmuller self-assigned this Jan 22, 2026
@mindspank
Copy link
Copy Markdown
Contributor

Can we cherry pick this onto 0.80?

@begelundmuller begelundmuller merged commit 46ef7b8 into main Jan 23, 2026
15 checks passed
@begelundmuller begelundmuller deleted the begelundmuller/runtime-proxy-cors-any-origin branch January 23, 2026 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants