fix(ios): route editor REST requests through a native relay under Lockdown Mode - #611

Open

dcalhoun wants to merge 83 commits into

trunkfrom

task/stabilize-rest-request-relay

Commits on Aug 14, 2026

fix: route editor REST requests through a native proxy under iOS Lockdown Mode
jkmassel
committed
6ec8cfc
refactor: serve the Lockdown Mode REST relay from the shared local media server
jkmassel
committed
8c77be2

Commits on Aug 31, 2026

Merge branch 'trunk' into jkmassel/lockdown-mode-file-uploads
dcalhoun
authored
8db3c25
fix(ios): correct which requests the local HTTP server admits

dcalhoun
and
claude
committed
25720ec
fix(ios): relay REST requests by path, contained to the site API root

dcalhoun
and
claude
committed
1a85ad7
fix(ios): raise the local HTTP server's connection limit

dcalhoun
and
claude
committed
b68400c
fix: route editor REST requests through the relay as the fetch handler

dcalhoun
and
claude
committed
71d3ab6
chore(ios): drop the demo app's baked-in wp-env credentials

dcalhoun
and
claude
committed
051d50f
test(ios): cover the REST relay against a live WordPress site

dcalhoun
and
claude
committed
f03fe6d
fix: never take the relay's port and token from persisted config

dcalhoun
and
claude
committed
ef857d0
fix: relay site URLs that arrive on a host alias

dcalhoun
and
claude
committed
659273f
refactor: relay REST requests by wrapping fetch, not api-fetch

dcalhoun
and
claude
committed
f6254fb
refactor: compose the fetch wrappers through a chain

dcalhoun
and
claude
committed
9fe0c2f
fix(wp-env): stop swallowing OPTIONS requests that are not preflights

dcalhoun
and
claude
committed
39a43ed
test(ios): assert the relay carries the Allow header back

dcalhoun
and
claude
committed
7a3f0ac
docs: record why host aliases are tolerated in one place and not the other

dcalhoun
and
claude
committed
6279f37
fix(ios): answer a refused relay redirect instead of relaying the 3xx

dcalhoun
and
claude
committed
9970d0c
chore(ios): remove the origin probe

dcalhoun
and
claude
committed
d7979bc
fix(ios): point the upload probe only at the site

dcalhoun
and
claude
committed
c2ebc04
fix(ios): refuse dot segments whose separators are encoded

dcalhoun
and
claude
committed
4afaa1d
fix: relay only the configured site's hosts

dcalhoun
and
claude
committed
00524e6
fix: pass local server requests through by port, not origin

dcalhoun
and
claude
committed
7c0e118
fix(ios): advertise the upload port only when an uploader is behind it

dcalhoun
and
claude
committed
4243493
fix(ios): stop persisting the editor configuration

dcalhoun
and
claude
committed
c69054d
fix: install the fetch wrappers only once

dcalhoun
and
claude
committed
4c7330e

Commits on Sep 1, 2026

fix(ios): share the relay's URL session and guard an unmeasurable body

dcalhoun
and
claude
committed
4685df0
fix(ios): scope the preflight auth exemption to the policy that answers it

dcalhoun
and
claude
committed
5833b72
fix(ios): make NetworkProxy constructible outside the module

dcalhoun
and
claude
committed
5752368
docs(ios): repair two comments the relay work left behind

dcalhoun
and
claude
committed
c526597
fix(wp-env): allow the method-override header through CORS

dcalhoun
and
claude
committed
d52fc12
docs: trim the relay's commentary to what the code needs

dcalhoun
and
claude
committed
cd550c1
revert(ios): keep persisting the editor configuration

dcalhoun
and
claude
committed
1494ca6
fix: require the site's port to match before relaying

dcalhoun
and
claude
committed
7a6ac1f
docs: correct the reason for assigning hostname over host

dcalhoun
and
claude
committed
64e5919
docs(ios): say which CORS policy a browser client needs

dcalhoun
and
claude
committed
f1ceebd
docs(ios): describe the relay's actual transport, not a retry

dcalhoun
and
claude
committed
b9941fd
fix(ios): ignore a caller-supplied rest_route parameter

dcalhoun
and
claude
committed
05f9e59
fix(ios): drop the inert Accept entry from the CORS allow list

dcalhoun
and
claude
committed
6c4c639
fix(ios): follow a redirect that only upgrades the scheme

dcalhoun
and
claude
committed
15f9f84
fix(ios): strip the remaining hop-by-hop headers

dcalhoun
and
claude
committed
3ca6a89
test(ios): stop leaking tasks into the shared session

dcalhoun
and
claude
committed
16e64bb
test(ios): delete the relay's test post even when an assertion fails

dcalhoun
and
claude
committed
014943d
refactor(ios): stop filtering rest_route from relayed queries

dcalhoun
and
claude
committed
586b23f
fix(ios): expose relayed response headers with a wildcard

dcalhoun
and
claude
committed
5d34495
fix: leave no-cors requests off the relay

dcalhoun
and
claude
committed
c6d51b6
test(ios): pin the preflight test to the policy that can break

dcalhoun
and
claude
committed
34986ef
refactor(ios): drop an unreachable body-length guard

dcalhoun
and
claude
committed
7d81d89
fix: reject from the relay fetch rather than throwing

dcalhoun
and
claude
committed
e54d394
refactor: order installEditorFetchWrappers by call order

dcalhoun
and
claude
committed
1c00c13
refactor(ios): resolve the relay route through handles(_:)

dcalhoun
and
claude
committed
253055d
docs(ios): document restRelay and correct the file:// origin

dcalhoun
and
claude
committed
3e67022
test(ios): cover the relay's header rewriting without a site

dcalhoun
and
claude
committed
8b0eaee
docs(ios): say why the expose list keeps names behind the wildcard

dcalhoun
and
claude
committed
d934a7e
fix(ios): strip the site's cookies from relayed responses

dcalhoun
and
claude
committed
de510b0
test(ios): release a stubbed session's registration

dcalhoun
and
claude
committed
e7c7fab
feat(ios): name the header a refused preflight died on

dcalhoun
and
claude
committed
39a73f5
fix(ios): answer the server's own refusals in a shape the editor parses

dcalhoun
and
claude
committed
ba6d19d
fix(ios): withhold the upload delegate when its pipeline is down

dcalhoun
and
claude
committed
f3239ca
fix(ios): keep the Lockdown Mode override out of release builds

dcalhoun
and
claude
committed
f91a148
refactor(ios): take error reason phrases from the status table

dcalhoun
and
claude
committed
6772707
refactor(ios): build the WordPress error body in one place

dcalhoun
and
claude
committed
5e585da
refactor(ios): drop a flag reset that changes nothing

dcalhoun
and
claude
committed
53aaa9d
perf(ios): join the CORS allow list once, not per response

dcalhoun
and
claude
committed
f6b19e8
refactor: hoist values that do not vary per request

dcalhoun
and
claude
committed
ecb68f5
refactor(ios): build the relay's upstream request through the parser

dcalhoun
and
claude
committed
c2293e9
refactor: let the host own the relay's URL

dcalhoun
and
claude
committed
4bb79dc
chore(demo): remove the Lockdown Mode upload probe

dcalhoun
and
claude
committed
186e787
docs: drop two comments that explain the edit, not the code

dcalhoun
and
claude
committed
5702746
Revert "refactor(ios): drop a flag reset that changes nothing"

dcalhoun
and
claude
committed
0824e3f

Commits on Sep 2, 2026

Merge branch 'trunk' into task/stabilize-rest-request-relay
dcalhoun
authored
7548ba7
fix: relay plain-permalink REST requests

dcalhoun
and
claude
committed
0abff40
fix(ios): decode the route of an advertised plain-permalink root

dcalhoun
and
claude
committed
0cb3bac
fix(ios): replay a streamed body across a redirect the relay follows

dcalhoun
and
claude
committed
37d18be
fix(ios): follow a relay redirect onto an alias of the configured host

dcalhoun
and
claude
committed
c3713dc
fix: leave the relay off, not the editor, for a root that is not a URL

dcalhoun
and
claude
committed
769ed85
test: assert the network log is installed outside the relay

dcalhoun
and
claude
committed
ffa1023
docs(ios): scope the CORSPolicy.none handler guidance to unauthenticated servers

dcalhoun
and
claude
committed
2ad6635
refactor(ios): build the WordPress error response in one place

dcalhoun
and
claude
committed
eddf537
chore(demo): drop the coordinator's unread editor view controller

dcalhoun
and
claude
committed
314a53b
refactor: define canonicalHost where it is first called

dcalhoun
and
claude
committed
edaf6e8
docs: say why the local-server passthrough is kept

dcalhoun
and
claude
committed
99a077a
docs(ios): describe the Origin sanitization without naming a host

dcalhoun
and
claude
committed
4edfc58
docs(demo): drop the removed upload probe from the idle-timer comment

dcalhoun
and
claude
committed
aa2130a