Files
OwnCord/Client
jevb 246127e911 security: gate acceptInvalidCerts on allowSelfSigned config
Fix 3 functions (verifyTotp, uploadFile, getHealth) that hardcoded
danger.acceptInvalidCerts: true unconditionally, bypassing the user's
allowSelfSigned setting. Now conditional like doFetch.

TOTP codes, file uploads, and health checks no longer skip TLS
verification unless the user explicitly opts into self-signed certs.
2026-04-01 11:38:46 +02:00
..