feature-sso #40

Merged
David merged 3 commits from feature-sso into main 2026-05-10 18:55:32 +02:00
Owner
No description provided.
`s.starts_with('/')` alone accepts paths like `//evil.com/x`, which
browsers resolve as `https://evil.com/x`. Add `&& !s.starts_with("//")`
so callback only redirects to same-origin paths.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Merge remote-tracking branch 'origin/main' into feature-sso
Some checks failed
Check / clippy + fmt + tests (pull_request) Has been cancelled
92db3afcb6
Merge branch 'main' into feature-sso
Some checks failed
Check / clippy + fmt + tests (pull_request) Failing after 3s
Create release / Create release from merged PR (pull_request) Has been skipped
8b2cb9f408
David merged commit e53a4d8050 into main 2026-05-10 18:55:32 +02:00
David deleted branch feature-sso 2026-05-10 18:55:32 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
a8n-tools/rusty-links!40
No description provided.