2 Commits

Include renames

Author	SHA1	Message	Date
Moheeb Zara	92170e44f4	fix(auth): validate /auth/callback next param against open-redirect (D3) ... next was appended to origin unvalidated; next=//evil.com or /\evil.com redirected off-site post-login. Now only a same-origin absolute path (single leading slash, no //, no /\) is honored, else /dashboard.	2026-05-18 18:31:06 -07:00
v0	296c5dd78d	Initial commit from v0	2026-03-11 04:44:48 +00:00