jtricerolph 28d3db8039 Extension: request host permission dynamically instead of relying on CORS ... Backend CORS is disabled by default (origin: false), and an unpacked extension's ID isn't fixed/predictable per install anyway, so allowlisting it server-side would be awkward. options.js now calls chrome.permissions.request() for the entered base URL on Save — once granted, the extension's own fetches bypass CORS entirely for that origin. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-09-01 18:49:28 +00:00
..
extension-src	Extension: request host permission dynamically instead of relying on CORS	2026-09-01 18:49:28 +00:00
src	Fix NewBook write mechanism, bundle push extension, remove vestigial hotel_id	2026-09-01 18:11:35 +00:00
Dockerfile	Fix NewBook write mechanism, bundle push extension, remove vestigial hotel_id	2026-09-01 18:11:35 +00:00
package-lock.json	Fix NewBook write mechanism, bundle push extension, remove vestigial hotel_id	2026-09-01 18:11:35 +00:00
package.json	Fix NewBook write mechanism, bundle push extension, remove vestigial hotel_id	2026-09-01 18:11:35 +00:00