What's Changed
- Security: a web page on another local port (such as a dev server on
localhost:3000) can no longer send commands to moshi-hook or open its terminals. Pages that moshi-hook serves itself andssh -Lforwards keep working. - New:
moshi-hook set allowed-originslists extra web origins that may always reach moshi-hook, and a refused request names this command. - Fixed: on Windows, the Moshi app can start moshi-hook over SSH again, and self-update keeps
moshi.execurrent with the new installer layout. Reinstall withinstall.ps1to get the new layout.