Perfect_Python500/MineGeo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Harden request origin checks and configure allowed hosts

Browse Source
This commit is contained in:
perfect_python500
2026-10-04 17:00:02 +05:00
parent 5289c17adf
commit 04cc4f39f6
6 changed files with 319 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.env.example
View File

@@ -1,5 +1,11 @@
# Public website URL (HTTPS for hosted contributor pairing)
MINEGEO_URL=http://localhost:3000
# Bind to 0.0.0.0 when intentionally accessing a development server over the LAN.
MINEGEO_HOST=127.0.0.1
# Optional comma-separated exact public origins for a reverse proxy or aliases.
MINEGEO_ALLOWED_ORIGINS=
# Testing only: true bypasses browser origin checks (including CSRF origin protection).
MINEGEO_ALLOW_ANY_ORIGIN=false
NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=
# Server only. Never prefix this key with NEXT_PUBLIC_.