ryan f48426dbf8 fix(frontend): sanitize redirect targets to prevent XSS/open redirect ...

Sanitize and validate redirect targets from callbackUrl parameter and sessionStorage in login, registration, and OAuth callback flows.
Introduced safeRedirectTarget helper which rejects protocol-relative URLs, non-relative schemes, control characters, backslashes, and encoding bypasses.

2026-06-13 09:51:30 +08:00

..

services

系统控制台完成更新

2026-06-12 14:12:03 +08:00

theme

嵌入与邮箱

2026-06-08 20:37:57 +08:00

utils

设置界面优化

2026-06-08 20:37:40 +08:00

app-info.ts

build: 优化 Docker/Workflow 构建，使用 Next.js 环境变量注入版本和构建时间，并移除对 package.json 的硬编码替换

2026-06-11 20:18:49 +08:00

cap-solver.ts

cap 与系统信息

2026-06-08 20:37:47 +08:00

task-param-utils.ts

修复任务参数类型转换

2026-06-11 08:40:08 +08:00

utils.ts

fix(frontend): sanitize redirect targets to prevent XSS/open redirect

2026-06-13 09:51:30 +08:00