unforgit 0.11.21 → 0.11.23

package/dist/index.js

@@ -3407,6 +3407,11 @@ function assertSafeDashboardBind(host, allowNetwork = false) {
     );
   }
 }
+var IP_OR_LOOPBACK_HOST = /^(\d{1,3}(\.\d{1,3}){3}|localhost|.*:.*)$/i;
+function dashboardAllowedHosts(host, configured) {
+  if (IP_OR_LOOPBACK_HOST.test(host)) return configured;
+  return configured ? `${configured},${host}` : host;
+}
 function parseDashboardPort(port) {
   const value = port === void 0 ? 3838 : Number(port);
   if (!Number.isInteger(value) || value < 1 || value > 65535) {
@@ -3469,16 +3474,22 @@ Examples:
   if (launch.host !== "127.0.0.1" && launch.host !== "localhost") {
     logger.warn("Dashboard is bound to a network address. Use only on trusted private networks such as Tailscale.");
   }
+  const env = {
+    ...process.env,
+    UNFORGIT_WORKSPACE: launch.workspace
+  };
+  const allowedHosts = dashboardAllowedHosts(
+    launch.host,
+    process.env.UNFORGIT_DASHBOARD_ALLOWED_HOSTS
+  );
+  if (allowedHosts !== void 0) env.UNFORGIT_DASHBOARD_ALLOWED_HOSTS = allowedHosts;
   const child = spawn2(
     "pnpm",
     ["exec", "next", "dev", "-p", String(launch.port), "-H", launch.host],
     {
       cwd: dashboardAppDir,
       stdio: "inherit",
-      env: {
-        ...process.env,
-        UNFORGIT_WORKSPACE: launch.workspace
-      }
+      env
     }
   );
   child.on("error", (err) => {