Fix security issues reported by Dependabot for version 4#5514

Draft

kretajak wants to merge 3 commits intowebpack:version-4from

kretajak:fix/security-issues

Commits on Jun 6, 2025

fix(security): requests with an IP addresses Origin header are not allowed to connect to WebSocket

sapphi-red
authored and
kretajak
committed
fix(security): check cross origin requests

sapphi-red
authored and
kretajak
committed

Commits on Jun 12, 2025

fix: respect the `allowedHosts` option for cross-origin header check (#5510)

alexander-akait
authored and
kretajak
committed