yiekheng e1ba1da2de feat(web): safeRedirect helper for the login \?next= param ...

Falls back to / for anything that isn't a single-slash-prefixed
relative path. Locks out protocol-relative (//evil.com), absolute
(https://evil.com), and javascript: redirects. 7 tests cover the
full attacker matrix.

2026-05-10 17:44:10 +08:00

..

public

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

scripts

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

src

feat(web): safeRedirect helper for the login \?next= param

2026-05-10 17:44:10 +08:00

components.json

feat(web): shadcn/ui init + base components

2026-05-09 22:46:16 +08:00

next-env.d.ts

feat(web): browser notifications for reminder + send-test events

2026-05-10 13:30:40 +08:00

next.config.ts

feat(web): PWA via @serwist/next + manifest + icons (P3/T22)

2026-05-10 13:20:45 +08:00

package.json

chore: add bcryptjs to web + db packages

2026-05-10 17:41:06 +08:00

postcss.config.mjs

feat(web): scaffold Next.js 16 app with Tailwind 4 + Geist

2026-05-09 22:40:03 +08:00

tsconfig.json

feat(web): scaffold Next.js 16 app with Tailwind 4 + Geist

2026-05-09 22:40:03 +08:00

vitest.config.ts

test(web): unit tests for accounts-list layout and behaviour

2026-05-10 01:06:38 +08:00