spawn/packages
A 2a23ebcaf2
fix(security): restrict OAuth auth code regex to alphanumeric only (#2116)
Removes underscore and hyphen from the OAuth authorization code
validation regex, restricting it to alphanumeric characters only.
Defense in depth: if the code is ever used in logging or other
contexts, special characters won't create injection opportunities.

Fixes #2114

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-02 13:49:12 -08:00
..
cli fix(security): restrict OAuth auth code regex to alphanumeric only (#2116) 2026-03-02 13:49:12 -08:00
shared feat!: remove Fly.io cloud provider support (#1979) 2026-02-27 00:06:32 -05:00