Context
PR #256 added two example apps using WithPermissiveOriginCheck() for local-dev convenience.
Source PR: #256
Suggested by: @claude[bot]
Comment type: PR review (round 7)
Task Description
Add a one-line inline comment near each WithPermissiveOriginCheck() call in:
examples/literate-counter-include/_app/main.go
examples/literate-linked-include/_app/main.go
Suggested wording: // Safe only because this app is deployed on the same trusted host as the docs; production apps should use strict origin checking.
The sharedAuth type already has a thorough comment, but the WithPermissiveOriginCheck call is the more common copy-paste target.
Original Comment
WithPermissiveOriginCheck() is fine for a tutorial counter on trusted dev infra, but it's listed without a comment in the handler setup. Adding one sentence near WithPermissiveOriginCheck() would help prevent copy-paste misuse.
— @claude[bot], round 7
Auto-created by /prmonitor from PR review comments.
Context
PR #256 added two example apps using
WithPermissiveOriginCheck()for local-dev convenience.Source PR: #256
Suggested by: @claude[bot]
Comment type: PR review (round 7)
Task Description
Add a one-line inline comment near each
WithPermissiveOriginCheck()call in:examples/literate-counter-include/_app/main.goexamples/literate-linked-include/_app/main.goSuggested wording:
// Safe only because this app is deployed on the same trusted host as the docs; production apps should use strict origin checking.The
sharedAuthtype already has a thorough comment, but theWithPermissiveOriginCheckcall is the more common copy-paste target.Original Comment
Auto-created by /prmonitor from PR review comments.