tcjlj/OpenFlare
1
0
Fork 0
mirror of https://github.com/Rain-kl/OpenFlare.git synced 2026-09-30 06:16:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
129 Commits 3 Branches 61 Tags
30aa89f68625732c4674e8ce881843efc0d439bb
Commit Graph

2 Commits

Author SHA1 Message Date
ryan f48426dbf8 fix(frontend): sanitize redirect targets to prevent XSS/open redirect 
Sanitize and validate redirect targets from callbackUrl parameter and sessionStorage in login, registration, and OAuth callback flows.
Introduced safeRedirectTarget helper which rejects protocol-relative URLs, non-relative schemes, control characters, backslashes, and encoding bypasses.
 2026-06-13 09:51:30 +08:00
ryan 8a782525de 压缩历史至 95081aff 2026-06-08 20:34:27 +08:00