@goodandready/dsh-subscriptions 0.6.18 → 0.6.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -285,6 +285,10 @@ export function registerStatusRoutes(ctx, state) {
285
285
  writeJson(res, 405, { ok: false, error: { code: 'method', message: 'POST only' } })
286
286
  return
287
287
  }
288
+ if (!isTrustedSettingsRequest(req)) {
289
+ writeJson(res, 403, { ok: false, error: { code: 'forbidden', message: 'same-origin only' } })
290
+ return
291
+ }
288
292
  let payload = {}
289
293
  try { payload = JSON.parse((await readBody(req, 64 * 1024)).toString('utf8') || '{}') } catch (err) { /* ignore status inspection error */ }
290
294
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@goodandready/dsh-subscriptions",
3
- "version": "0.6.18",
3
+ "version": "0.6.19",
4
4
  "description": "Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.",
5
5
  "license": "MIT",
6
6
  "type": "module",