11 Commits

Author	SHA1	Message	Date
ryan	f48426dbf8	fix(frontend): sanitize redirect targets to prevent XSS/open redirect ... Sanitize and validate redirect targets from callbackUrl parameter and sessionStorage in login, registration, and OAuth callback flows. Introduced safeRedirectTarget helper which rejects protocol-relative URLs, non-relative schemes, control characters, backslashes, and encoding bypasses.	2026-06-13 09:51:30 +08:00
ryan	6a1f89936e	登录界面优化	2026-06-12 11:35:48 +08:00
ryan	d9df78d2c7	邮箱注册要求	2026-06-12 10:55:24 +08:00
ryan	63e3ade7f4	登录注册分开	2026-06-12 10:27:03 +08:00
ryan	40e8a7cfa3	重构获取公共参数	2026-06-09 16:47:49 +08:00
ryan	72c74803be	优化	2026-06-08 20:38:01 +08:00
ryan	72d72810b2	cap 与系统信息	2026-06-08 20:37:47 +08:00
ryan	9d0f9f0576	user	2026-06-08 20:37:40 +08:00
ryan	4b72419a96	去除默认OIDC	2026-06-08 20:37:40 +08:00
ryan	360a26f109	oauth	2026-06-08 20:34:28 +08:00
ryan	8a782525de	压缩历史至 95081aff	2026-06-08 20:34:27 +08:00