fix(security): open redirect, stored XSS, and postMessage origin hardening - #96

Open

dinex-dev wants to merge 3 commits into

fix/security-issues

Commits on Jul 29, 2026

fix(auth): prevent open redirect after login (RQ-2303, CWE-601)

dinex-dev
and
claude
committed
fix(security): remove rehype-raw to prevent stored XSS (RQ-2304, CWE-79)

dinex-dev
and
claude
committed
fix(security): validate postMessage origin in rule editor (RQ-2309, CWE-79)

dinex-dev
and
claude
committed