mirror of
https://github.com/Twigpine/openlaunch.git
synced 2026-11-10 05:01:52 -10:00
Limit build-only CI tokens to read-only contents permissions. Clarify intentional control filtering without changing signed post text, and replace the sitemap test hostname-prefix check with exact origins. Cover the image-preview React attribute boundary without changing its runtime behavior or dismissing the existing scanner warning.