fix: escape OAuth callback error text - #29

Open

ryanduguid wants to merge 1 commit into

XeroAPI:mainfrom

ryanduguid:fix/escape-oauth-callback-errors

ryanduguid commented Aug 6, 2026

Summary

HTML-escape provider-supplied OAuth error descriptions before showing them in the local callback page
add a restrictive response CSP
add a regression test for markup/script injection

Validation

npm test
npm run build


          fix: escape OAuth callback error text

6474c29

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet