Roland 3d22993389 fix: validate return_to redirect URLs (#2532) ... return_to query parameters are now parsed and only http and https URLs are used for redirects, both in the frontend and when the createApp API adds the connection parameters to the URL. The production frontend build now also includes the same Content-Security-Policy meta tag that is served as a header in http mode, so the policy also applies where no HTTP headers are set, e.g. in the desktop app. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>		2026-08-11 14:57:51 +07:00
..
alby_http_service.go	feat: stories (#2172)	2026-06-02 10:50:15 +02:00
http_service.go	fix: validate return_to redirect URLs (#2532)	2026-08-11 14:57:51 +07:00
http_service_test.go	fix: unlock error when node is not started (#2151)	2026-04-07 17:38:47 +05:30
models.go	Refactor: API cleanup (#338)	2024-05-30 00:06:06 +07:00