kevinveenbirkenbachandClaude Opus 5.5 815714592c fix(web-svc-logout): keep each conductor's sweep on its own network ...

CI run 41147980556 Nextcloud#0 failed both conductor design specs on a
multi-network node. e0179a0893 handed every conductor the other
network's conductor in LOGOUT_SIBLINGS. With that list set,
universal-logout v1.5.0 hides #iframe-warning on the stand-alone page
("'#iframe-warning' matches nothing visible"), and v1.5.1 fetches the
sibling after its sweep, which the conductor's per-network CSP blocks
("Connecting to 'https://logout.main.infinito.test/' violates ...
connect-src 'self' *.<onion>"). Requirement 037 limits each vhost's CSP
to its own network, so the browser hand-off could never complete in
either direction; its only effects were the two red specs.

Drop the LOGOUT_SIBLINGS wiring and its README bullet, so the compose
template and README match their state before e0179a0893. Each conductor
still logs out of every domain of its own network; ending the sessions
of the other network belongs on the server side, not in the browser.
The test now asserts that no conductor on a single-network, tor-only or
multi-network node is handed a conductor of another network.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 10:05:29 +01:00

..

filter_plugins

Merge branch 'feature/updater' into feature/store-i18n

2026-10-23 17:32:32 +02:00

templates

fix(web-svc-logout): keep each conductor's sweep on its own network

2026-10-31 10:05:29 +01:00

__init__.py

…