Jakub Zych f4259560c2 test(08-10): close wristband 103-method PHP audit gaps ...

- register loopback http:// acceptance, javascript: URI rejection, and
  error-body no-secret/no-stack-trace evidence
- token-exchange plain PKCE rejection even when verifier equals the
  stored (non-S256) challenge

2026-09-24 00:05:41 +02:00

6.6 KiB

Raw Blame History

View Raw