feat(lotus): accept decorations from chat.lotusguild.org (matrix #22) #56

Merged
jared merged 1 commits from feat/decorations-origin into lotus 2026-10-19 12:40:07 -04:00
Owner

Part of LotusGuild/matrix#22. Decorations are now served from https://chat.lotusguild.org/decorations/ (static files, a one-week public cache, no cookies) instead of Nextcloud's public DAV.

  • ALLOWED_DECORATION_ORIGINS gains https://chat.lotusguild.org (first entry). drive.lotusguild.org stays until no cinny build points there; I'll remove it in a later release.
  • New test: both hosts are accepted, and a look-alike host (chat.lotusguild.org.evil.example) is rejected.

The cinny side (switching DECORATION_CDN) follows once this is released.

🤖 Generated with Claude Code

https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5

Part of LotusGuild/matrix#22. Decorations are now served from `https://chat.lotusguild.org/decorations/` (static files, a one-week public cache, no cookies) instead of Nextcloud's public DAV. - `ALLOWED_DECORATION_ORIGINS` gains `https://chat.lotusguild.org` (first entry). `drive.lotusguild.org` stays until no cinny build points there; I'll remove it in a later release. - New test: both hosts are accepted, and a look-alike host (`chat.lotusguild.org.evil.example`) is rejected. The cinny side (switching `DECORATION_CDN`) follows once this is released. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
jared added 1 commit 2026-10-19 12:37:54 -04:00
feat(lotus): accept decorations from chat.lotusguild.org (matrix #22)
CI / Publish to Gitea npm registry (pull_request) Skipped
CI / Build embedded bundle (pull_request) Successful in 1m42s
090edc5c2c
Decorations moved off Nextcloud to https://chat.lotusguild.org/decorations.
Add that origin to ALLOWED_DECORATION_ORIGINS (first, so tests use it);
keep drive.lotusguild.org until no host build points there.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
jared merged commit 1ad32e56c7 into lotus 2026-10-19 12:40:07 -04:00
Sign in to join this conversation.