CodingOnStar cc06433dd3 fix(web): stop allowing Marketplace origin as a post-login redirect ... Marketplace login returns to the same-origin authorize URL, so the Marketplace prefix does not belong on the post-login allowlist. Also add that origin to frame-src so the detail iframe is not blocked when a CSP whitelist is enabled.		2026-08-14 12:38:03 +08:00
..
base	fix(chat): derive themes per chat root (#39790)	2026-07-30 06:11:13 +00:00
billing	fix(web): render workspace plan badge during SSR (#40581)	2026-08-12 07:45:39 +00:00
workflow/workflow-generator	style: format with vp fmt (#38803)	2026-07-12 15:57:46 +00:00
app-star-i18n.test.ts	style: format with vp fmt (#38803)	2026-07-12 15:57:46 +00:00
embed.spec.ts	fix(web): allow clipboard writes in embedded apps (#39511)	2026-07-24 08:27:57 +00:00
embedded-user-id-auth.test.tsx	feat: app deployment v2 (#39829)	2026-08-12 01:55:36 +00:00
embedded-user-id-store.test.tsx	test(web): align test state boundaries (#39239)	2026-07-20 06:06:17 +00:00
env.spec.ts	feat: add trunstile (#40494)	2026-08-12 03:08:19 +00:00
i18n-upload-features.test.ts	style: format with vp fmt (#38803)	2026-07-12 15:57:46 +00:00
interactive-component-mock-boundary.spec.ts	test(web): remove Base UI component mocks (#39877)	2026-08-02 09:51:45 +00:00
proxy-frame-options.spec.ts	fix(web): stop allowing Marketplace origin as a post-login redirect	2026-08-14 12:38:03 +08:00