Studio · glowup

Band items (combo, agents, meter) show in narrow; the pane shows in wide and fullscreen.

claude — ~/shop

●▸Readsrc/auth.ts

Read 84 lines

●⌕Search"next=" in src

Found 6 matches

●◆TaskExplore: find other redirect callers

●✎Updatesrc/auth.ts+9 −2

- return { ok: true, redirect: next }

+ const target = safeNext(next) ?? "/"

+ return { ok: true, redirect: target }

●$Bashpnpm test

✗ 1 failed · login keeps protocol-relative //evil.example

●✎Updatesrc/auth.ts+2 −1

+ if (next.startsWith("//")) return null

●✎Updatetest/auth.test.ts+6 −0

●$Bashpnpm test

✓ 5 passed

Fixed. safeNext() rejects absolute and protocol-relative targets; the suite passes.

·✓ 5 passed

·♥♥♥♡♡

❯

◆ idle · ctx 15% · ◐ high · 5h 38% ↻2h13m · wk 12% ↻Sun