* Studio: scope the seeded bootstrap password auto-fill to loopback clients
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
* Studio: block bootstrap injection through Cloudflare tunnels
* Studio: require loopback host for bootstrap injection
* Studio: add regression test for unparseable Host in bootstrap loopback gate
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
* Scope bootstrap auto-fill to a direct-loopback client (block proxy/tunnel headers and malformed Host)
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
* Reject scope-id addresses in loopback check (fail closed on ::1%zone Host)
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
* Reject malformed bracketed Host in loopback check (e.g. [::1]evil)
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
---------
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Daniel Han <danielhanchen@gmail.com>
Co-authored-by: danielhanchen <23090290+danielhanchen@users.noreply.github.com>
