fix(mesh): validate redirect_uri in oauth-proxy to prevent OAuth hijacking#3110

Merged

viktormarinho merged 5 commits intodecocms:mainfrom

0xcucumbersalad:fix/oauth-proxy-redirect-uri-validation

Apr 14, 2026

Commits on Apr 13, 2026

fix(mesh): validate redirect_uri in oauth-proxy to prevent OAuth hijacking

decobot
and
claude
committed
style(mesh): format oauth-proxy redirect_uri validation

decobot
and
claude
committed
fix(mesh): make redirect_uri optional in oauth-proxy validation

decobot
and
claude
committed

Commits on Apr 14, 2026

fix(mesh): validate redirect_uri against BASE_URL instead of hardcoded hosts

decobot
and
claude
committed
fix(mesh): prevent redirect_uri duplicate-param bypass in oauth-proxy

decobot
and
claude
committed