4 Commits

Include renames

Author	SHA1	Message	Date
archipelagoandClaude Fable 5	a80712963c	feat(appgate): proxied apps become embeddable — gate neutralizes frame blocking ... Apps that ship X-Frame-Options (Alby Hub: DENY) or a CSP frame-ancestors directive rendered as a dead grey pane in the dashboard's embedded app session; the historical fix was a bespoke per-app nginx strip proxy (gitea). The gate now removes X-Frame-Options and strips ONLY the frame-ancestors directive from proxied responses — the rest of the app's CSP passes through untouched. The clickjacking threat those headers address is handled the same way the gate's own pages handle it: every proxied request is authenticated first, and the gate already declares permissive frame-ancestors on its own responses. Unit-tested; verified live on archi-dev-box (Alby Hub embeds, CSP intact). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-12 13:05:25 -04:00
archipelago	a7a6528b08	chore: release v1.8.0-alpha	2026-08-12 08:59:14 -04:00
archipelagoandClaude Fable 5	a500a75235	style: rustfmt update.rs — unblock release gate ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-12 07:35:54 -04:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00