@saws/open-design-service 2.0.0-beta.23 → 2.0.0-beta.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -448,9 +448,10 @@ function proxyHttp(request, response) {
|
|
|
448
448
|
},
|
|
449
449
|
(upstreamResponse) => {
|
|
450
450
|
// The gateway CSP protects gateway-owned pages, but OpenDesign relies on inline
|
|
451
|
-
// bootstrap scripts and
|
|
452
|
-
//
|
|
451
|
+
// bootstrap scripts and embedded previews. Preserve upstream framing policies
|
|
452
|
+
// when they exist instead of imposing the gateway policy on proxied content.
|
|
453
453
|
response.removeHeader("content-security-policy");
|
|
454
|
+
response.removeHeader("x-frame-options");
|
|
454
455
|
response.writeHead(upstreamResponse.statusCode || 502, upstreamResponse.headers);
|
|
455
456
|
upstreamResponse.pipe(response);
|
|
456
457
|
},
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@saws/open-design-service",
|
|
3
|
-
"version": "2.0.0-beta.
|
|
3
|
+
"version": "2.0.0-beta.25",
|
|
4
4
|
"description": "Deploy OpenDesign with protected browser authentication for Codex and Claude Code",
|
|
5
5
|
"license": "ISC",
|
|
6
6
|
"author": "",
|
|
@@ -21,7 +21,7 @@
|
|
|
21
21
|
}
|
|
22
22
|
},
|
|
23
23
|
"dependencies": {
|
|
24
|
-
"@saws/core": "2.0.0-beta.
|
|
25
|
-
"@saws/docker-service": "2.0.0-beta.
|
|
24
|
+
"@saws/core": "2.0.0-beta.25",
|
|
25
|
+
"@saws/docker-service": "2.0.0-beta.25"
|
|
26
26
|
}
|
|
27
27
|
}
|