4 Commits

Author	SHA1	Message	Date
ryan	f48426dbf8	fix(frontend): sanitize redirect targets to prevent XSS/open redirect ... Sanitize and validate redirect targets from callbackUrl parameter and sessionStorage in login, registration, and OAuth callback flows. Introduced safeRedirectTarget helper which rejects protocol-relative URLs, non-relative schemes, control characters, backslashes, and encoding bypasses.	2026-06-13 09:51:30 +08:00
ryan	6a1f89936e	登录界面优化	2026-06-12 11:35:48 +08:00
ryan	d9df78d2c7	邮箱注册要求	2026-06-12 10:55:24 +08:00
ryan	63e3ade7f4	登录注册分开	2026-06-12 10:27:03 +08:00