Fringg a744b41910 fix: harden OAuth login flow — open redirect, path traversal, info leak ...

- Validate authorize_url is HTTPS before redirect (open redirect prevention)
- encodeURIComponent on provider name in API URL paths (path traversal prevention)
- encodeURIComponent on referralCode in t.me deep link
- Gate console.warn behind import.meta.env.DEV (no info leak in prod)

2026-02-11 02:58:04 +03:00

..

admin.ts

feat: add system info card to admin dashboard

2026-02-08 22:52:14 +03:00

adminApps.ts

refactor: simplify AdminApps page to config selector and compact app chips

2026-02-05 14:56:41 +03:00

adminBroadcasts.ts

Update adminBroadcasts.ts

2026-01-31 18:02:39 +03:00

adminEmailTemplates.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

adminPaymentMethods.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

adminPayments.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

adminRemnawave.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

adminSettings.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

adminTraffic.ts

fix: show email for OAuth/email users in traffic table

2026-02-08 22:04:57 +03:00

adminUpdates.ts

feat: add admin updates page with release history

2026-02-08 23:20:49 +03:00

adminUsers.ts

feat: add admin traffic packages and device limit management UI

2026-02-08 21:13:46 +03:00

auth.ts

fix: harden OAuth login flow — open redirect, path traversal, info leak

2026-02-11 02:58:04 +03:00

balance.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

banSystem.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

branding.ts

fix: hide backend URL from logo by fetching as blob

2026-02-08 17:40:24 +03:00

campaigns.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

client.ts

feat: add OAuth 2.0 login UI (Google, Yandex, Discord, VK)

2026-02-07 01:59:05 +03:00

contests.ts

refactor: full codebase cleanup, dependency updates, and lint fixes

2026-02-06 16:55:55 +03:00

currency.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

index.ts

refactor: full codebase cleanup, dependency updates, and lint fixes

2026-02-06 16:55:55 +03:00

info.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

notifications.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

polls.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

promo.ts

refactor: full codebase cleanup, dependency updates, and lint fixes

2026-02-06 16:55:55 +03:00

promocodes.ts

feat: add promo group and promo offer management to AdminUserDetail

2026-02-07 08:10:44 +03:00

promoOffers.ts

refactor: full codebase cleanup, dependency updates, and lint fixes

2026-02-06 16:55:55 +03:00

referral.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

servers.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

subscription.ts

fix(subscription): display promo group discounts in device/traffic purchase and tariff switch

2026-02-05 06:26:27 +03:00

tariffs.ts

feat: show affected subscriptions count on tariff deletion

2026-02-09 22:30:28 +03:00

themeColors.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

ticketNotifications.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

tickets.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00

wheel.ts

refactor: migrate to eslint flat config and format codebase with prettier

2026-01-27 17:37:31 +03:00