85c0b9a3dc3795bf33646ef128ad070181c7abec
Reject requests from unrecognised Host headers when running authenticated/private. Adds server middleware, CLI `allowed-hostname` command, config-schema field, and prompt support for configuring allowed hostnames during onboard/configure. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Description
Mirror of paperclipai/paperclip with ORA-284 prompt-padding fix branch
Languages
TypeScript
97.7%
JavaScript
1.3%
Shell
0.6%
CSS
0.2%
HTML
0.1%