cloudflare/workers-oauth-provider v0.0.10

v0.0.10

Repository: cloudflare/workers-oauth-provider

Tag: v0.0.10

Published: 2025-09-16T18:08:13Z

Prerelease: no

Release notes:

Patch Changes

• #87 `1804446` Thanks @threepointone! - explicitly block javascript: (and other suspicious protocols) in redirect uris

In , we blocked redirects that didn't start with http:// or https:// to prevent xss attacks with javascript: URIs. However this blocked redirects to custom apps like cursor:// et al. This patch now explicitly blocks javascript: (and other suspicious protocols) in redirect uris.