Marc-André Bombeck fd6a80a921 fix(nightscout): assert the public-host floor before persisting the URL ...

Egress was already correct — the client fetches through safeFetch with
requirePublicHost pinned off the user's opt-in, manual redirects and a
timeout — but the check on the value we STORE was only a side effect of
the live probe the connect route happens to run first. That makes the
guard contingent on the probe's placement rather than on the input.

Run isPublicUrl at input time, gated on the same self-hoster opt-in, so
the URL that gets encrypted onto the row is the URL that was validated.
Cover the alt-notation classes the helper knows about; each case asserts
the probe was never reached, which is what distinguishes the input-time
refusal from the fetch-time one.

2026-07-19 11:40:56 +02:00

..

connect

fix(nightscout): assert the public-host floor before persisting the URL

2026-07-19 11:40:56 +02:00

disconnect

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

status

feat(integrations): add Nightscout CGM glucose sync

2026-06-14 19:06:56 +02:00

test

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00