fix(security): URL parameter injection and redirect URI validation#45

Closed

Copilot wants to merge 8 commits into

mainfrom

copilot/security-review-of-library

Commits on Feb 28, 2026

Initial plan
Copilot
committed
chore: initial security review plan

Copilot
and
deviantintegral
committed
fix: URL injection and redirect URI validation security vulnerabilities

Copilot
and
deviantintegral
committed
revert: remove unintended pyproject.toml and uv.lock changes

Copilot
and
deviantintegral
committed
fix: apply ruff formatting to tests/test_b2c_login.py

Copilot
and
deviantintegral
committed
chore: add release-please config to keep uv.lock in sync with version bumps

Copilot
and
deviantintegral
committed
fix: replace generic uv.lock text replacement with uv lock workflow

Copilot
and
deviantintegral
committed
fix: accept redirect URIs with trailing slash (msal{id}://auth/?...)

Copilot
and
deviantintegral
committed