Jakub Zych 633d45082e fix(19.7): RB-IN-01 the My account URL check refuses control characters ...

Browsers strip tab and newline from URLs, so "/\t/host" passed the
SPA's same-origin check and resolved off-site. The check now refuses any
ASCII control character first, as Go's url.Parse does on the server, and
an absolute URL must parse with a host, so both sides apply one rule.

2026-10-23 20:31:28 +02:00

..

AccountContributions.test.ts

fix(19.7): RB-IN-01 the My account URL check refuses control characters

2026-10-23 20:31:28 +02:00

ApiTokenCreateDialog.test.ts

test(admin): import the untested SPA modules directly for check-phase10 hygiene

2026-10-11 16:13:19 +02:00

ApiTokensPanel.test.ts

test(admin): import the untested SPA modules directly for check-phase10 hygiene

2026-10-11 16:13:19 +02:00