Triple-C

Files

T

shadowdaoandClaude Opus 5.5 19ae92d4f8 Marketplace fetch: offer the token only to the marketplace host (final review M1)

The credential callback answered every credential request. gix follows
a redirect of the initial handshake and asks for credentials for the
redirect target, so the token could be sent to another host. The
callback now answers only when the request's scheme, host and port
match the marketplace URL (gix's own URL normalisation, host compared
case-insensitively); anything else gets no credential.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-27 10:12:47 -07:00

public

Give the app a mark that survives being 16 pixels tall

2026-08-11 12:01:39 -07:00

src

Marketplace: pin the commit the user reviewed (final review I2)

2026-09-27 10:11:19 -07:00

src-tauri

Marketplace fetch: offer the token only to the marketplace host (final review M1)

2026-09-27 10:12:47 -07:00

index.html

Give the app a mark that survives being 16 pixels tall