Skip to content

FOLLOW-UP: Add inline comment near WithPermissiveOriginCheck() in example main.go files (from PR #256) #267

Description

@adnaan

Context

PR #256 added two example apps using WithPermissiveOriginCheck() for local-dev convenience.

Source PR: #256
Suggested by: @claude[bot]
Comment type: PR review (round 7)

Task Description

Add a one-line inline comment near each WithPermissiveOriginCheck() call in:

  • examples/literate-counter-include/_app/main.go
  • examples/literate-linked-include/_app/main.go

Suggested wording: // Safe only because this app is deployed on the same trusted host as the docs; production apps should use strict origin checking.

The sharedAuth type already has a thorough comment, but the WithPermissiveOriginCheck call is the more common copy-paste target.

Original Comment

WithPermissiveOriginCheck() is fine for a tutorial counter on trusted dev infra, but it's listed without a comment in the handler setup. Adding one sentence near WithPermissiveOriginCheck() would help prevent copy-paste misuse.
@claude[bot], round 7


Auto-created by /prmonitor from PR review comments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P4-backlogBacklog: future, nice-to-havefollow-upFollow-up task from PR reviewfrom-reviewIssue originated from PR review

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions