fix: Electron HTTP fix + stripped background fix

src/backend/dashboard.ts

@@ -37,7 +37,11 @@ app.use(
         return callback(null, true);
       }
 
-      callback(null, true);
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
+      callback(new Error("Not allowed by CORS"));
     },
     credentials: true,
     methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],

src/backend/database/database.ts

@@ -68,6 +68,10 @@ app.use(
         return callback(null, true);
       }
 
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
       callback(new Error("Not allowed by CORS"));
     },
     credentials: true,

src/backend/ssh/file-manager.ts

@@ -65,7 +65,11 @@ app.use(
         return callback(null, true);
       }
 
-      callback(null, true);
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
+      callback(new Error("Not allowed by CORS"));
     },
     credentials: true,
     methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],

src/backend/ssh/server-stats.ts

@@ -603,7 +603,11 @@ app.use(
         return callback(null, true);
       }
 
-      callback(null, true);
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
+      callback(new Error("Not allowed by CORS"));
     },
     credentials: true,
     methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],

src/backend/ssh/tunnel.ts

@@ -41,7 +41,11 @@ app.use(
         return callback(null, true);
       }
 
-      callback(null, true);
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
+      callback(new Error("Not allowed by CORS"));
     },
     credentials: true,
     methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],