dsh-mobile 0.8.8 → 0.8.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/CHANGELOG.md +15 -0
  2. package/CONTRIBUTORS.md +10 -0
  3. package/README.en.md +8 -6
  4. package/README.md +8 -6
  5. package/apps/mobile/README.md +19 -3
  6. package/apps/mobile/README.zh-CN.md +19 -3
  7. package/apps/mobile/release.json +3 -3
  8. package/docs/ATTACH_EXISTING_FRPS.en.md +1 -1
  9. package/docs/IROH.en.md +4 -4
  10. package/docs/IROH.md +4 -4
  11. package/docs/README.md +8 -1
  12. package/docs/TRUSTED_NETWORKS.en.md +2 -0
  13. package/docs/TRUSTED_NETWORKS.md +2 -0
  14. package/docs/WEB_PUSH.en.md +1 -1
  15. package/docs/WEB_PUSH.md +1 -1
  16. package/lib/client.js +191 -0
  17. package/lib/client.js.map +1 -1
  18. package/lib/index.mjs +2 -1
  19. package/lib/index.mjs.map +1 -1
  20. package/lib/mobile-layout.js +17 -4
  21. package/lib/mobile-layout.js.map +1 -1
  22. package/native/iroh-host/README.md +1 -1
  23. package/package.json +3 -2
  24. package/packages/question-fixes/package.json +1 -1
package/lib/index.mjs CHANGED
@@ -2234,7 +2234,8 @@ function cookie(name, value, options) {
2234
2234
  }
2235
2235
  /** Enforce direct CIDR, exact Host, and browser same-origin facts. */
2236
2236
  function assertExternalTrust(request, policy, requireOrigin) {
2237
- if (!addressAllowed(request.socket.remoteAddress, policy.cidrs) || !policy.acceptsHost(request.headers.host)) throw new HttpError(403, "forbidden");
2237
+ if (!addressAllowed(request.socket.remoteAddress, policy.cidrs)) throw new HttpError(403, "source_network_untrusted");
2238
+ if (!policy.acceptsHost(request.headers.host)) throw new HttpError(403, "forbidden");
2238
2239
  const origin = request.headers.origin;
2239
2240
  if (origin !== void 0 && !policy.acceptsOrigin(origin)) throw new HttpError(403, "forbidden");
2240
2241
  const site = request.headers["sec-fetch-site"];