feat: Enhance security by implementing least-privilege permissions and improving HTML sanitization#233

Merged

frontegg-david merged 8 commits intomainfrom

Feb 4, 2026

Commits on Feb 3, 2026

feat: Enhance security by implementing least-privilege permissions and improving HTML sanitization
frontegg-david
committed

Commits on Feb 4, 2026

feat: Enhance security by escaping class names to prevent attribute injection
frontegg-david
committed
feat: Enhance security by implementing robust HTML sanitization using DOMPurify and validating redirect URIs
frontegg-david
committed
feat: Enhance security by validating redirect URIs against safeRedirectUriSchema to prevent open-redirect/XSS vulnerabilities
frontegg-david
committed
test: Update OAuth flow tests to validate redirect_uri handling per OAuth 2.1 spec
frontegg-david
committed
feat: Enhance security by preventing open-redirect attacks during CIMD validation failures and improving tag name parsing for custom elements
frontegg-david
committed
feat: Enhance security by implementing static mapping for Tailwind grid-cols classes and re-exporting sanitizeHtml for backward compatibility
frontegg-david
committed
feat: Enhance security by adjusting CORS middleware behavior and implementing DoS prevention for HTML sanitization
frontegg-david
committed