mirror of
https://github.com/J3vb/OwnCord.git
synced 2026-09-03 03:50:00 +03:00
api.setConfig spread the new config over the old, so switching hosts carried the previous server's session token forward and the login request to the next server went out holding a live credential for the first one. The token is now dropped in the shared setConfig when host changes without an accompanying token, covering login, register and auto-connect at once. Also fixes a packaged-build-only failure: the CSP omitted blob: from img-src, so avatar upload validation (which measures the image via URL.createObjectURL) always failed in release and never in dev. Smaller connection and IPC fixes: ws_disconnect now bumps the connection generation instead of nulling the sender slot, so an in-flight handshake cannot install after a disconnect; a dead LiveKit proxy listener deregisters itself instead of being reused forever; httpProxy no longer caches an origin the Rust side may have torn down; logPersistence stopped looping on its own flush-failure logs; ConnectPage subscribes to transientError instead of reading it once; cert-mismatch accept/reject only act when the event host matches the live session. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>