fix: treat loopback aliases as equivalent in isSameOrigin#5659

Merged

bjohansebas merged 3 commits into

webpack:nextfrom

ThierryRakotomanana:fix/isSameOrigin-loopback-alias-mismatch

May 15, 2026

Commits on May 11, 2026

fix: treat loopback aliases as equivalent in isSameOrigin

ThierryRakotomanana
authored and
bjohansebas
committed
fix: update test to handle IPv6 loopback address in host header simulation
bjohansebas
committed
fix: enhance isSameOrigin to respect explicit allowedHosts excluding loopback aliases
bjohansebas
committed