유창욱 7317bfb2b3 fix: reject protocol-relative and backslash URLs in safeUrl ... Address commit security review: the same-origin branch of safeUrl accepted //host and /\host, which browsers normalize to an external host (open redirect). Allow only true same-origin paths.		2026-06-20 18:47:13 +09:00
..
operator-gui	fix: reject protocol-relative and backslash URLs in safeUrl	2026-06-20 18:47:13 +09:00