)]}'
{
  "commit": "0d0dc6bc356a4f5f27e1fdce7480ee80ef88ea44",
  "tree": "5c98baf293d346ac0fe4ebefd383d2bf96aa415b",
  "parents": [
    "507dd23119e4548574ca825e729ad287a3fef23a"
  ],
  "author": {
    "name": "Marc Kupietz",
    "email": "kupietz@ids-mannheim.de",
    "time": "Sun Feb 15 08:43:12 2026 +0100"
  },
  "committer": {
    "name": "Helge",
    "email": "stallkamp@ids-mannheim.de",
    "time": "Mon May 04 11:32:54 2026 +0200"
  },
  "message": "Restrict allow-same-origin to plugins that actually ARE AND request it\n\nOnly grant allow-same-origin sandbox permission to plugins that\nexplicitly request it AND are hosted on the same origin as the\napplication. Cross-origin plugins requesting same-origin are denied\nwith a warning log.\n\nTo request same-origin, you need to add this in the local plugin\nconfigurarzin, for example as follows:\n\n```\n{\n  \"name\" : \"Export\",\n  \"desc\" : \"Exports Kalamar results\",\n  \"embed\" : [{\n    \"panel\" : \"result\",\n    \"title\" : \"exports KWICs and snippets\",\n    \"icon\" : \"\\uf019\",\n    \"classes\" : [\"button-icon\", \"plugin\" ],\n    \"onClick\" : {\n      \"action\" : \"addWidget\",\n      \"template\" : \"https://korap.ids-mannheim.de/instance/test-docker/plugin/export/export\",\n      \"permissions\" : [\"forms\", \"scripts\", \"downloads\", \"same-origin\" ]\n    }\n  }]\n}\n```\n\nChange-Id: Ifcaddc4f39023c4d885921b2d527f5748811c78d\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fcf47d52ed744ef20abc330ef8bac9b824ec49a7",
      "old_mode": 33188,
      "old_path": "Changes",
      "new_id": "fe451322d8019f9e0509776e657b3c6389c9f05a",
      "new_mode": 33188,
      "new_path": "Changes"
    },
    {
      "type": "modify",
      "old_id": "4195fab1d00d88976c37853d63fc8cd6bc058431",
      "old_mode": 33188,
      "old_path": "dev/js/spec/pluginSpec.js",
      "new_id": "32a6e5e6b54533dd47cab313a93749bcbab72ec1",
      "new_mode": 33188,
      "new_path": "dev/js/spec/pluginSpec.js"
    },
    {
      "type": "modify",
      "old_id": "aa00182126bbcdc06088c64f46b6c3accd634f9e",
      "old_mode": 33188,
      "old_path": "dev/js/src/plugin/service.js",
      "new_id": "ef6836c290bb90405047943f61573fee31372d9c",
      "new_mode": 33188,
      "new_path": "dev/js/src/plugin/service.js"
    }
  ]
}