fix(security): harden authentication and outbound targets (#1877)

* fix(security): harden auth and outbound targets

* fix(security): prevent login lockout and honor trusted schemes
This commit is contained in:
Anso
2026-09-01 20:52:12 +00:00
committed by GitHub
parent 82dca29314
commit 79b86ddcd4
76 changed files with 1457 additions and 212 deletions
+1 -1
View File
@@ -49,7 +49,7 @@ test.describe('Node management', () => {
// Scope to the dialog so we target the submit button, not the trigger
await page.getByRole('dialog').getByRole('button', { name: /add node/i }).click();
await expect(page.getByText(/loopback|localhost/i)).toBeVisible({ timeout: 5_000 });
await expect(page.getByText(/target is not allowed/i)).toBeVisible({ timeout: 5_000 });
});
test('adding a node with an invalid URL shows an error', async ({ page }) => {