Skip to content

v1.2.1

Choose a tag to compare

View all tags
@ralyodio ralyodio released this 26 Oct 21:25
v1.2.1
d2c7284
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security: one safeRedirectPath helper for every login redirect target (#654). Closes tab/backslash open-redirect bypasses (/%09/evil.example, /\evil.example) in CoinPay login, the OAuth callback returnTo, LoginForm, /auth/confirm next and the protected-route middleware.

Assets 2
Loading