Garry Tan e046e851eb fix(design): bind server to localhost and validate reload paths ... Cherry-pick PR #803 by @garagon. Adds hostname: '127.0.0.1' to Bun.serve() and validates /api/reload paths are within cwd() or tmpdir(). Closes C1+C2 from security audit #783. Co-Authored-By: garagon <garagon@users.noreply.github.com> Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-04 21:19:09 -07:00
..
src	fix(design): bind server to localhost and validate reload paths	2026-04-04 21:19:09 -07:00
test	feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551)	2026-03-27 20:32:59 -06:00
prototype.ts	feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551)	2026-03-27 20:32:59 -06:00