mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-20 01:11:18 +00:00
Removes underscore and hyphen from the OAuth authorization code validation regex, restricting it to alphanumeric characters only. Defense in depth: if the code is ever used in logging or other contexts, special characters won't create injection opportunities. Fixes #2114 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cli | ||
| shared | ||