Part of LotusGuild/matrix#22. Decorations are now served from https://chat.lotusguild.org/decorations/ (static files, a one-week public cache, no cookies) instead of Nextcloud's public DAV.
ALLOWED_DECORATION_ORIGINS gains https://chat.lotusguild.org (first entry). drive.lotusguild.org stays until no cinny build points there; I'll remove it in a later release.
New test: both hosts are accepted, and a look-alike host (chat.lotusguild.org.evil.example) is rejected.
The cinny side (switching DECORATION_CDN) follows once this is released.
Part of LotusGuild/matrix#22. Decorations are now served from `https://chat.lotusguild.org/decorations/` (static files, a one-week public cache, no cookies) instead of Nextcloud's public DAV.
- `ALLOWED_DECORATION_ORIGINS` gains `https://chat.lotusguild.org` (first entry). `drive.lotusguild.org` stays until no cinny build points there; I'll remove it in a later release.
- New test: both hosts are accepted, and a look-alike host (`chat.lotusguild.org.evil.example`) is rejected.
The cinny side (switching `DECORATION_CDN`) follows once this is released.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Part of LotusGuild/matrix#22. Decorations are now served from
https://chat.lotusguild.org/decorations/(static files, a one-week public cache, no cookies) instead of Nextcloud's public DAV.ALLOWED_DECORATION_ORIGINSgainshttps://chat.lotusguild.org(first entry).drive.lotusguild.orgstays until no cinny build points there; I'll remove it in a later release.chat.lotusguild.org.evil.example) is rejected.The cinny side (switching
DECORATION_CDN) follows once this is released.🤖 Generated with Claude Code
https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5