Patrik 96289bf555 fix(next): block encoded and escaped open redirects in getSafeRedirect (#11907) ...

### What

This PR improves the `getSafeRedirect` utility to improve security
around open redirect handling.

### How

- Normalizes and decodes the redirect path using `decodeURIComponent`
- Catches malformed encodings with a try/catch fallback
- Blocks open redirects

2025-03-31 13:11:34 -04:00

..

app

feat!: on demand rsc (#8364)

2024-11-11 13:59:05 -05:00

collections/Posts

feat(next): root admin (#7276)

2024-07-23 13:44:44 -04:00

globals/Menu

fix: only add snapshot to versions query when localization is enabled (#8293)

2024-09-19 10:40:47 -04:00

.gitignore

feat!: beta-next (#7620)

2024-08-13 12:54:33 -04:00

config.ts

feat: preselected theme (#8354)

2024-09-26 11:09:29 -03:00

e2e.spec.ts

fix(ui): logic for showing copyToLocale button and adds test (#11584)

2025-03-07 14:13:48 +00:00

eslint.config.js

chore(eslint): FlatConfig type deprecated, set to Config

2024-09-20 22:46:40 -04:00

int.spec.ts

feat!: beta-next (#7620)

2024-08-13 12:54:33 -04:00

next-env.d.ts

feat(ui)!: scope all payload css to payload-default layer (#8545)

2024-10-04 13:02:56 -06:00

next.config.mjs

feat!: beta-next (#7620)

2024-08-13 12:54:33 -04:00

payload-types.ts

fix(next): block encoded and escaped open redirects in getSafeRedirect (#11907)

2025-03-31 13:11:34 -04:00

schema.graphql

chore: significantly improve eslint performance, lint and prettier everything

2024-08-29 21:25:50 -04:00

shared.js

feat(next): root admin (#7276)

2024-07-23 13:44:44 -04:00

tsconfig.eslint.json

feat(next): root admin (#7276)

2024-07-23 13:44:44 -04:00

tsconfig.json

feat(next): root admin (#7276)

2024-07-23 13:44:44 -04:00