mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-19 17:55:19 +00:00
8b3d8d3e86
Test coverage for CORS origin validation including: - No origin header (non-browser clients) - Same-origin requests with/without proxy headers - Wildcard and explicit allowed origins - Private network fallback (192.168.x, 10.x, localhost, .local, .lan) - Public IP/domain rejection - X-Forwarded-Proto/Host/Scheme header handling - WebSocket protocol normalization (ws->http, wss->https) Coverage: 37.3% → 48.6%