 naeel
|
1350f0dbba
|
security: fix OIDC state check bypass + open redirect in login-token
- oidc.js: remove || true — state check now works in all environments
- auth.js: wrap returnTo in safeReturn (was unprotected on line 166)
|
2026-06-11 20:02:49 +04:00 |
|