Compare commits

..

3 Commits

Author SHA1 Message Date
Xe Iaso
d6d6e04024 docs: update CHANGELOG
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-10-29 15:50:36 -04:00
Xe Iaso
d9d5d2312e fix(lib): close open redirect when in subrequest mode
Closes GHSA-cf57-c578-7jvv

Previously Anubis had an open redirect in subrequest auth mode due to an
insufficent fix in GHSA-jhjj-2g64-px7c. This patch adds additional
validation at several steps of the flow to prevent open redirects in
subrequest auth mode as well as implements automated testing to prevent
this from occuring in the future.
2025-10-29 15:48:09 -04:00
Xe Iaso
cc45c5c135 test(nginx-external-auth): bring up to code standards
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-10-29 14:36:06 -04:00
3 changed files with 4 additions and 4 deletions

View File

@@ -1 +1 @@
1.23.0
1.23.0-pre2

4
package-lock.json generated
View File

@@ -1,12 +1,12 @@
{
"name": "@techaro/anubis",
"version": "1.23.0",
"version": "1.23.0-pre2",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "@techaro/anubis",
"version": "1.23.0",
"version": "1.23.0-pre2",
"license": "ISC",
"dependencies": {
"@aws-crypto/sha256-js": "^5.2.0",

View File

@@ -1,6 +1,6 @@
{
"name": "@techaro/anubis",
"version": "1.23.0",
"version": "1.23.0-pre2",
"description": "",
"main": "index.js",
"scripts": {