ryan f48426dbf8 fix(frontend): sanitize redirect targets to prevent XSS/open redirect ...

Sanitize and validate redirect targets from callbackUrl parameter and sessionStorage in login, registration, and OAuth callback flows.
Introduced safeRedirectTarget helper which rejects protocol-relative URLs, non-relative schemes, control characters, backslashes, and encoding bypasses.

2026-06-13 09:51:30 +08:00

..

animate-ui

压缩历史至 95081aff

2026-06-08 20:34:27 +08:00

auth

fix(frontend): sanitize redirect targets to prevent XSS/open redirect

2026-06-13 09:51:30 +08:00

common

系统控制台完成更新

2026-06-12 14:12:03 +08:00

home

fix

2026-06-09 08:51:53 +08:00

layout

界面优化

2026-06-12 14:17:53 +08:00

providers

登录界面优化

2026-06-12 11:35:48 +08:00

ui

登录界面优化

2026-06-12 11:35:48 +08:00