mirror of
https://github.com/Heretek-AI/GDevelop-Unlocked.git
synced 2026-10-12 02:02:47 +00:00
Two holes raised in review, each now with a negative control: - an endpoint route could lose its local-* user branch and still pass; sites that take a userId must now carry both conditions. - discovery was by declaration shape, so a hosted request in a function declaration or method would have gone unclassified. Every hosted request must now sit inside a classified call site. Co-Authored-By: Claude Opus 5.5 <[email protected]>