fix(auth0-express): harden createRouteUrl against path injection attacks#23

Open

cschetan77 wants to merge 6 commits into

mainfrom

fix/route-url-path-validation

Commits on Jul 13, 2026

fix(auth0-express): harden createRouteUrl against path injection attacks
cschetan77
committed
fix(auth0-express): address code review findings on path validation hardening
cschetan77
committed
fix(auth0-express): fix subpath regression and simplify URL validation
cschetan77
committed
fix(auth0-express): restore subpath handling in toSafeRedirect
cschetan77
committed
chore(auth0-express): add comment explaining toSafeRedirect scheme branching
cschetan77
committed
docs(auth0-express): improve JSDoc comments for createRouteUrl and toSafeRedirect
cschetan77
committed