Bryan Frimin e7df6f6b2a Restrict OAuth client branding URLs to http(s) ...

CIMD and registration accepted any URI scheme for client_uri and
logo_uri, so allowlisted metadata could surface javascript: links on
sign-in. Validate absolute http/https at ingest and only expose those
schemes in branding.

Signed-off-by: Bryan Frimin <bryan@probo.com>

2026-07-21 15:44:19 +02:00

..

oauth2

Restrict OAuth client branding URLs to http(s)

2026-07-21 15:44:19 +02:00

oauth2scope

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

oidc

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

policy

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

saml

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

scim

Archive SCIM users with in-use profiles instead of 500ing

2026-07-15 15:44:29 +02:00

account_service.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

api_key.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

auth_service.go

Route connect OAuth through unified sign-in

2026-07-21 15:44:17 +02:00

authorizer_batch_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

authorizer_decisionlog_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

authorizer_oauth2_scope_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

authorizer_unit_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

authorizer.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

compliance_page_service.go

Rewire IAM, mailman, and probod for the portal

2026-07-21 15:44:08 +02:00

decision_log.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

errors_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

errors.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

iam_actions.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

iam_policies.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

oauth2_scope_registrations_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

oauth2_scopes.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

organization_service.go

Move trust center profile onto the page

2026-07-21 15:44:10 +02:00

policy_set_test.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

policy_set.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

saml_domain_verifier.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

service.go

Rewire IAM, mailman, and probod for the portal

2026-07-21 15:44:08 +02:00

session_service.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

validators.go

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00