Xe Iaso a0a6b3f147 fix(lib): block XSS attacks via nonstandard URLs ...

This could allow an attacker to craft an Anubis pass-challenge URL that
forces a redirect to nonstandard URLs, such as the `javascript:` scheme
which executes arbitrary JavaScript code in a browser context when the
user clicks the "Try again" button.

Release-status: cut
Signed-off-by: Xe Iaso <me@xeiaso.net>

2025-07-24 13:54:33 +00:00

..

admin

Pass forward X-Real-IP to nginx backend server (#901)

2025-07-24 12:11:53 +00:00

design

feat(lib): use new challenge creation flow (#749)

2025-07-04 20:42:28 +00:00

developer

feat: dev container support (#734)

2025-06-29 23:41:29 -04:00

user

docs(known-instances): update list of known instances (#847)

2025-07-17 07:37:37 -04:00

CHANGELOG.md

fix(lib): block XSS attacks via nonstandard URLs

2025-07-24 13:54:33 +00:00

funding.md

docs: update default difficulty to 4

2025-04-21 17:41:22 -04:00

index.mdx

chore(sponsors): add fabulous systems

2025-07-12 23:08:30 +00:00