fix(security): sanitize API redirect_path on login/register (open-redirect) - #14

Merged

venkyden merged 2 commits into

fix/login-register-open-redirect

Jun 25, 2026

Commits on Jun 24, 2026

fix(security): sanitize API redirect_path on login/register (open-redirect)

venkyden
and
claude
committed
dc9351d
fix(security): reject backslash in safeRedirectPath (open-redirect bypass)

venkyden
and
claude
committed
c7c0645