[sync] fix(security): move window.location.origin check inside isValidRedirectPath to fix SSR crash (#1527)

[tea-artist]

🔄 Automated sync from EE repository.

6 commit(s) synced since last sync.

Authors

• Aries X caoxing9@gmail.com
• Bieber artist@teable.io
• nichenqin nichenqin@hotmail.com

Included commits

• fix(security): move window.location.origin check inside isValidRedirectPath to fix SSR crash (Bug: Automation HTTP Request JSON array in body #1527) (Bieber)
• fix: map v1 filter is/isNot with null value to isEmpty/isNotEmpty T2462 (feat: base chat UI #1524) (nichenqin)
• fix: community ci error (feat: filtering by formatted date #1523) (Aries X)
• fix(security): validate redirect parameter to prevent XSS and open redirect T2355 (fix: enhance grid selection logic to correctly handle presort record and update selection range #1439) (Bieber)
• fix: should not pop the index create tips when user do not have permission (feat: improve accept locals retrieval #1520) (Aries X)
• fix: community test error (Enhance querying and graphing abilities in Dashboards #1521) (Aries X)

Latest source commit: teableio/teable-ee@ff75939

This PR was automatically created by the sync workflow.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coveralls]

Pull Request Test Coverage Report for Build 23522213237

Details

• 23 of 47 (48.94%) changed or added relevant lines in 5 files are covered.
• No unchanged relevant lines lost coverage.
• Overall first build on sync/ee-20260325-023645 at 63.122%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
apps/nestjs-backend/src/event-emitter/event-job/fallback/fallback-queue.service.ts	5	7	71.43%
apps/nestjs-backend/src/event-emitter/event-job/fallback/local-queue.provider.ts	13	15	86.67%
apps/nestjs-backend/src/db-provider/select-query/postgres/select-query.postgres.spec.ts	0	5	0.0%
apps/nestjs-backend/src/features/auth/social/controller.adapter.ts	0	6	0.0%
apps/nestjs-backend/src/features/record/open-api/record-open-api-v2.service.ts	5	14	35.71%

Totals
Change from base Build 23486990488:	63.1%
Covered Lines:	25254
Relevant Lines:	40008

---

💛 - Coveralls

[github-actions]

🧹 Preview Environment Cleanup

• PR [sync] fix(security): move window.location.origin check inside isValidRedirectPath to fix SSR crash (#1527) #2830 has been Closed
• Preview environment has been deleted
• Cleanup time: 2026-03-25T03:34:35.597Z