webmail

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-10-31 16:13:15 +00:00

Files

T

dealerweb f0d87d594a Fix: honour basePath in plugin sandbox, http.post proxy, and branding

Upstream 1.7.2 prefixes most hand-written URLs with basePath via apiFetch /
withBasePath, but four subpath-relevant spots were missed:

- host-bridge: the sandbox iframe src was a bare "/plugin-sandbox" -> 404
  under NEXT_PUBLIC_BASE_PATH, breaking all plugins. Wrap in withBasePath.
- host-api doHttpPost: the same-origin /api/* plugin proxy used raw fetch on
  url.pathname -> 404 under a subpath. Route it through apiFetch.
- admin branding preview <img>: unprefixed src -> broken thumbnail.
- (sandbox) layout: drop the Geist font + globals.css imports. The sandbox
  runs with an opaque origin, so those assets are CORS-blocked; the plugin
  bundle and all host API calls travel over the postMessage bridge, so no
  same-origin asset fetch happens there.

2026-05-30 15:31:08 +02:00

bundle-integrity.ts

feat: sandbox plugins in null-origin iframes with postMessage RPC

2026-05-18 10:50:49 +02:00

bundle-signing.ts

fix: prefix hand-written URLs with basePath for subpath deployments

2026-05-22 16:38:55 +02:00

consent.ts

feat: harden plugin sandbox and migrate in-tree plugins

2026-05-18 12:17:54 +02:00

host-api.ts

Fix: honour basePath in plugin sandbox, http.post proxy, and branding