Repository navigation

fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix (supersedes #16) - #31

Closed

modacker wants to merge 13 commits into

MiniMax-AI:mainfrom

modacker:fix/round8-mp-csrf-from-upstream

Commits on Aug 27, 2026
- Add plugin: mcode-webui (Wzdhehe)
  
  Wzdhehe
  authored and
  moc
  committed
  33a5861
- docs: rename product name mcode -> Mcode in plugin tree docs
  
  Wzdhehe
  authored and
  moc
  committed
  f81e1e1
- fix: revert SKILL.md frontmatter name to mcode-webui; strip CRLF
  
  Wzdhehe
  authored and
  moc
  committed
  d4a886e
- fix: revert path references to mcode-webui (directory name is fixed lowercase by spec)
  
  Wzdhehe
  authored and
  moc
  committed
  7d21634
- chore: update GitHub URLs after Mcode-webui rename
  
  Wzdhehe
  authored and
  moc
  committed
  cae2a80
- feat(mcode-webui): v1.0.1 — token auth gate + LAN sub-card + read-only mode
  
  Wzdhehe
  authored and
  moc
  committed
  5ade9c7
- fix(mcode-webui): CORS preflight exemption + cross-origin Authorization support
  
  Wzdhehe
  authored and
  moc
  committed
  f2b1c8f
- fix(mcode-webui): round 3 review fixes (auth.js setters + startup smoke test + doc sync)
  
  Wzdhehe
  authored and
  moc
  committed
  ffacf58
- fix(mcode-webui): round 4 — db.js better-sqlite3 path resolver for non-canonical install layouts
  
  Wzdhehe
  authored and
  moc
  committed
  afd4167
- fix(mcode-webui): round 5 — fix better-sqlite3 resolver + error priority
  
  modacker
  authored and
  moc
  committed
  0dbdacd
- fix(mcode-webui): round 6 — add standard install candidate (fixes integration tests on macOS)
  
  modacker
  authored and
  moc
  committed
  c448424
- feat(mcode-webui): Token Plan key integration end-to-end
  
  moc
  and
  mavis
  committed
  091dec5
Commits on Sep 4, 2026
- fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix
  modacker
  committed
  16ebfab

Navigation Menu

Repository navigation

fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix (supersedes #16) - #31

fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix (supersedes #16)#31
modacker wants to merge 13 commits into
MiniMax-AI:mainfrom
modacker:fix/round8-mp-csrf-from-upstream

Commits on Aug 27, 2026

Add plugin: mcode-webui (Wzdhehe)

docs: rename product name mcode -> Mcode in plugin tree docs

fix: revert SKILL.md frontmatter name to mcode-webui; strip CRLF

fix: revert path references to mcode-webui (directory name is fixed lowercase by spec)

chore: update GitHub URLs after Mcode-webui rename

feat(mcode-webui): v1.0.1 — token auth gate + LAN sub-card + read-only mode

fix(mcode-webui): CORS preflight exemption + cross-origin Authorization support

fix(mcode-webui): round 3 review fixes (auth.js setters + startup smoke test + doc sync)

fix(mcode-webui): round 4 — db.js better-sqlite3 path resolver for non-canonical install layouts

fix(mcode-webui): round 5 — fix better-sqlite3 resolver + error priority

fix(mcode-webui): round 6 — add standard install candidate (fixes integration tests on macOS)

feat(mcode-webui): Token Plan key integration end-to-end

Commits on Sep 4, 2026

fix(mcode-webui): round 8 — CORS tightening + cross-origin token-leak fix