qwen-code/packages
tanzhenxin ec677383b9 fix(npm): prevent auth token leakage on cross-host redirects
- Strip auth token when following redirects to a different host
- Strip auth token when downloading tarballs from a different host
- Fix package name encoding to replace all slashes, not just the first

This prevents credentials from being sent to unintended hosts when
private registries redirect to CDNs or other external domains.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
2026-03-30 19:48:54 +08:00
..
cli Merge remote-tracking branch 'origin/main' into feat/npm-extension-installation 2026-03-30 19:16:08 +08:00
core fix(npm): prevent auth token leakage on cross-host redirects 2026-03-30 19:48:54 +08:00
hook_design/hooks_ui add test for hooks ui 2026-03-24 15:23:31 +08:00
sdk-java fix(core/rateLimit): add support for IdealTalk rate limit error code 1305 2026-02-28 11:05:41 +08:00
sdk-typescript chore(release): sdk-typescript v0.1.6 2026-03-30 04:01:57 +00:00
test-utils chore: bump version to 0.13.2 2026-03-30 16:21:33 +08:00
vscode-ide-companion chore: bump version to 0.13.2 2026-03-30 16:21:33 +08:00
web-templates chore: bump version to 0.13.2 2026-03-30 16:21:33 +08:00
webui chore: bump version to 0.13.2 2026-03-30 16:21:33 +08:00
zed-extension chore(zed-extension): update package version to 0.10.0 2026-02-06 14:26:01 +08:00