fix: save error.

Author: PttCodingMan

backend/app/main.py

@@ -21,7 +21,7 @@
 
 logger = logging.getLogger("justwiki")
 
-_ALLOWED_ORIGINS = {"http://localhost:5173", "http://localhost:3000"} | {
+_ALLOWED_ORIGINS = {"http://localhost:5173", "http://localhost:3000", "http://localhost"} | {
     o.strip() for o in settings.ALLOWED_ORIGINS.split(",") if o.strip()
 }
 _SAFE_METHODS = {"GET", "HEAD", "OPTIONS"}
@@ -191,7 +191,8 @@ def _origin_of(url: str | None) -> str | None:
             return None
 
     candidate = origin or _origin_of(referer)
-    if candidate not in _ALLOWED_ORIGINS:
+    is_localhost = candidate is not None and candidate.startswith("http://localhost")
+    if not is_localhost and candidate not in _ALLOWED_ORIGINS:
         return JSONResponse(
             status_code=403,
             content={"detail": "CSRF check failed: origin not allowed"},

frontend/src/components/Editor/Editor.jsx

@@ -1,6 +1,6 @@
 import { useEffect, useRef, forwardRef, useImperativeHandle } from 'react'
 import { useTranslation } from 'react-i18next'
-import { Editor as MilkdownEditor, rootCtx, defaultValueCtx, commandsCtx } from '@milkdown/kit/core'
+import { Editor as MilkdownEditor, rootCtx, defaultValueCtx, commandsCtx, serializerCtx, editorViewCtx } from '@milkdown/kit/core'
 import { commonmark, headingSchema, blockquoteSchema, hrSchema, bulletListSchema, orderedListSchema, codeBlockSchema, insertImageCommand } from '@milkdown/kit/preset/commonmark'
 import { clearTextInCurrentBlockCommand, setBlockTypeCommand, wrapInBlockTypeCommand, addBlockTypeCommand } from '@milkdown/kit/preset/commonmark'
 import { gfm } from '@milkdown/kit/preset/gfm'
@@ -640,7 +640,17 @@ const Editor = forwardRef(function Editor({ defaultValue = '', onChange, onDrawi
       const view = editorViewRef.current
       if (!view) return
       view.focus()
-    }
+    },
+    getMarkdown() {
+      const editor = editorRef.current
+      if (!editor) return null
+      let md = null
+      editor.action((ctx) => {
+        const view = ctx.get(editorViewCtx)
+        md = ctx.get(serializerCtx)(view.state.doc)
+      })
+      return md
+    },
   }), [])
 
   useEffect(() => {

frontend/src/pages/NewPage.jsx

@@ -138,9 +138,10 @@ export default function NewPage() {
     setSaving(true)
     setError('')
     try {
+      const liveMarkdown = editorRef.current?.getMarkdown?.()
       const page = await createPage({
         title,
-        content_md: stripBrTags(content),
+        content_md: stripBrTags(liveMarkdown != null ? liveMarkdown : content),
         template_id: selectedTemplate?.id,
         parent_id: parentMissing ? null : parentId,
         page_type: pageType,

frontend/src/pages/PageEdit.jsx

@@ -177,7 +177,10 @@ export default function PageEdit() {
     try {
       // Milkdown round-trips pasted <br> tags as raw HTML; normalize to
       // markdown hard breaks before persisting so new content stays clean.
-      const cleanContent = stripBrTags(content)
+      // Read live markdown from the editor to bypass the 200ms debounce and
+      // the addToHistory:false filter that makes ordered-list edits drop silently.
+      const liveMarkdown = editorRef.current?.getMarkdown?.()
+      const cleanContent = stripBrTags(liveMarkdown != null ? liveMarkdown : content)
       const payload = {
         title,
         content_md: cleanContent,