syncode/identity
2
0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: validate OAuth redirect origins #12

Merged
day01 merged %!d() commits from %!s() into %!s() 2026-08-23 08:36:06 +00:00
Conversation 0 Commits - Files Changed -
day01 commented 2026-08-23 08:19:37 +00:00
Owner
Copy Link
Copy Source

Require an exact scheme and authority match for OAuth redirect targets instead of a vulnerable string prefix check.

Require an exact scheme and authority match for OAuth redirect targets instead of a vulnerable string prefix check.
day01 added 1 commit 2026-08-23 08:19:38 +00:00
fix: validate OAuth redirect origins
day01 added 1 commit 2026-08-23 08:23:57 +00:00
Merge remote-tracking branch 'origin/develop' into feat/identity-stage4-hardening
day01 merged commit c12b1d9501 into %!s() 2026-08-23 08:36:06 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
KG5321 (KG5321) day01 nauron
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: syncode/identity#12