Julia McGhee b981cc0926 Fix harness forbidden error: use internal token instead of host check ...

The localhost check using host header and x-forwarded-for was unreliable
in the standalone Next.js server which may inject forwarded headers
internally. Replace with a per-process random token shared between the
PTY server and the API route via env var.

2026-03-21 21:59:45 +00:00

4.2 KiB

Raw Blame History

View Raw