yuanzonghao 11f5ca83ec fix(auth): reject control chars in OAuth callback next param ...

Defense-in-depth against header injection if the post-login redirect
target ever reaches a context that doesn't re-encode it.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-13 23:19:44 +08:00

..

api

feat(auth): add Supabase auth with Google, GitHub, and email OTP login

2026-06-13 17:33:55 +08:00

auth/callback

fix(auth): reject control chars in OAuth callback next param

2026-06-13 23:19:44 +08:00

gallery

feat(web): embed beat audio into gallery and infiplot exports

2026-06-11 09:29:16 +08:00

new

refactor: flatten monorepo to single web package (#12)

2026-06-03 00:55:45 +08:00

play

fix(auth): address PR review and OAuth state-loss bugs

2026-06-13 19:27:51 +08:00

globals.css

feat(web): merge SettingsModal and ModelSettingsModal with tab navigation

2026-06-11 12:15:14 +08:00

icon.svg

feat(web): add favicon (IP monogram SVG) (#18)

2026-06-03 11:23:34 +08:00

layout.tsx

feat(web,engine): portrait-orientation scene images for mobile full-bleed

2026-06-04 17:30:54 +08:00

page.tsx

fix(auth): address PR review and OAuth state-loss bugs

2026-06-13 19:27:51 +08:00