fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix (supersedes #16) - #31

Open

modacker wants to merge 13 commits into

MiniMax-AI:mainfrom

modacker:fix/round8-mp-csrf-from-upstream

Commits on Aug 27, 2026

Add plugin: mcode-webui (Wzdhehe)

Wzdhehe
authored and
moc
committed
33a5861
docs: rename product name mcode -> Mcode in plugin tree docs

Wzdhehe
authored and
moc
committed
f81e1e1
fix: revert SKILL.md frontmatter name to mcode-webui; strip CRLF

Wzdhehe
authored and
moc
committed
d4a886e
fix: revert path references to mcode-webui (directory name is fixed lowercase by spec)

Wzdhehe
authored and
moc
committed
7d21634
chore: update GitHub URLs after Mcode-webui rename

Wzdhehe
authored and
moc
committed
cae2a80
feat(mcode-webui): v1.0.1 — token auth gate + LAN sub-card + read-only mode

Wzdhehe
authored and
moc
committed
5ade9c7
fix(mcode-webui): CORS preflight exemption + cross-origin Authorization support

Wzdhehe
authored and
moc
committed
f2b1c8f
fix(mcode-webui): round 3 review fixes (auth.js setters + startup smoke test + doc sync)

Wzdhehe
authored and
moc
committed
ffacf58
fix(mcode-webui): round 4 — db.js better-sqlite3 path resolver for non-canonical install layouts

Wzdhehe
authored and
moc
committed
afd4167
fix(mcode-webui): round 5 — fix better-sqlite3 resolver + error priority

modacker
authored and
moc
committed
0dbdacd
fix(mcode-webui): round 6 — add standard install candidate (fixes integration tests on macOS)

modacker
authored and
moc
committed
c448424
feat(mcode-webui): Token Plan key integration end-to-end

moc
and
mavis
committed
091dec5

Commits on Sep 4, 2026

fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix
modacker
committed
16ebfab