ReleaseCloudflare (Workers AI)Cloudflare (Workers AI)published Oct 30, 2025seen Jun 26

cloudflare/workers-oauth-provider v0.0.13

cloudflare/workers-oauth-provider

Open original ↗

Captured source

source ↗
published Oct 30, 2025seen Jun 26captured 2whttp 200method plain

v0.0.13

Repository: cloudflare/workers-oauth-provider

Tag: v0.0.13

Published: 2025-10-30T11:31:08Z

Prerelease: no

Release notes:

Patch Changes

Added a robust helper to validate redirect URI schemes, preventing dangerous pseudo-schemes (e.g., javascript:, data:, vbscript:) with normalization and case-insensitive checks. Expanded test coverage to include bypass attempts using mixed case, whitespace, control characters, and edge cases to ensure comprehensive protection against XSS and related attacks.