# webpack-dev-server v5.2.1

- Product: webpack-dev-server (https://whatsnew.fyi/product/webpack-dev-server)
- Vendor: webpack
- Date: 2025-03-26
- Version: v5.2.1
- Original notes: https://github.com/webpack/webpack-dev-server/releases/tag/v5.2.1
- Permalink: https://whatsnew.fyi/product/webpack-dev-server/releases/v5.2.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
- **security** — Requests with IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or if different from the Host header
- **fixed** — Prevent overlay for errors caught by React error boundaries
- **fixed** — Take the first network found instead of the last one to restore the same behavior as 5.0.4

##### [5.2.1](https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v6.0.0) (2025-03-26)

###### Security

* cross-origin requests are not allowed unless allowed by `Access-Control-Allow-Origin` header
* requests with an IP addresses in the `Origin` header are not allowed to connect to WebSocket server unless configured by `allowedHosts` or it different from the `Host` header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

###### Bug Fixes

* prevent overlay for errors caught by React error boundaries ([#5431](https://github.com/webpack/webpack-dev-server/issues/5431)) ([8c1abc9](https://github.com/webpack/webpack-dev-server/commit/8c1abc903ab444d9ce99e567b9a6c603e1ec06be))
* take the first network found instead of the last one, this restores the same behavior as 5.0.4 ([#5411](https://github.com/webpack/webpack-dev-server/issues/5411)) ([ffd0b86](https://github.com/webpack/webpack-dev-server/commit/ffd0b86b790d372f90e17aea92cfd9def83fee96))