block/check-safety
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: sanction /api/helpdesk/ as a known non-proto fetch prefix (WO-028)

Browse Source 
Helpdesk attachment upload/download is multipart HTTP by design — ConnectRPC
has no multipart support — so the frontend fetch gets the same WARN-not-FAIL
treatment as /api/plugins/ and the other sanctioned REST endpoints.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Alex Dunmow 2026-06-10 21:40:25 +08:00
parent c3bb958f23
commit 7599fff971
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
frontend.go
View File

@ -58,6 +58,7 @@ var knownNonProtoFetches = map[string]bool{
"/api/plugins/": true, // Plugin REST APIs
"/api/mcp/": true, // MCP device auth flow
"/api/lists/subscribe": true, // Public subscribe endpoint
"/api/helpdesk/": true, // Helpdesk attachment multipart upload/download (ConnectRPC doesn't support multipart)
"/preview/": true, // Preview HTML endpoints
"/api/ai/chat/stream": true, // AI chat SSE streaming (EventSource/fetch — ConnectRPC doesn't support SSE)
"/api/support/": true, // CMS helpdesk widget: multipart attachment upload to the Chi proxy — connect-query can't send FormData