dify/web/app
CodingOnStar cc06433dd3 fix(web): stop allowing Marketplace origin as a post-login redirect
Marketplace login returns to the same-origin authorize URL, so the
Marketplace prefix does not belong on the post-login allowlist.

Also add that origin to frame-src so the detail iframe is not blocked
when a CSP whitelist is enabled.
2026-08-14 12:38:03 +08:00
..
__tests__ refactor(web): align query client ownership (#40024) 2026-08-05 07:02:09 +00:00
(commonLayout) feat(web): add embedded marketplace templates 2026-08-13 14:52:42 +08:00
(education) refactor(web): move education verification to dedicated routes (#40493) 2026-08-11 09:56:11 +00:00
(humanInputLayout)/form/[token] refactor(dify-ui): govern public component APIs (#39806) 2026-07-30 10:12:34 +00:00
(shareLayout) feat: app deployment v2 (#39829) 2026-08-12 01:55:36 +00:00
account fix(web): silent-authorize Marketplace by client id only 2026-08-14 12:37:57 +08:00
activate chore: canonicalize Tailwind classes (#39762) 2026-07-29 11:58:14 +00:00
auth/refresh refactor: centralize deployment edition in system features (#39454) 2026-07-24 07:15:02 +00:00
components fix(web): align marketplace hero decoration icons with Figma 2026-08-14 10:53:31 +08:00
device chore: improve current workspace summary (#40121) 2026-08-07 03:08:55 +00:00
education fix(web): render workspace plan badge during SSR (#40581) 2026-08-12 07:45:39 +00:00
forgot-password fix(web): use primary headings on password reset pages (#40193) 2026-08-10 03:13:31 +00:00
init style: format with vp fmt (#38803) 2026-07-12 15:57:46 +00:00
install fix(web): use a primary heading on the install page (#40194) 2026-08-10 02:26:36 +00:00
oauth-callback
reset-password fix(web): make verification back actions keyboard accessible (#40196) 2026-08-10 03:13:31 +00:00
signin fix(web): stop allowing Marketplace origin as a post-login redirect 2026-08-14 12:38:03 +08:00
signup fix(web): make verification back actions keyboard accessible (#40196) 2026-08-10 03:13:31 +00:00
styles Merge branch 'main' into feat/marketplace-homepage-redesign 2026-08-14 10:30:13 +08:00
error.tsx refactor: centralize deployment edition in system features (#39454) 2026-07-24 07:15:02 +00:00
favicon.ico chore(web): remove obsolete PWA assets (#40082) 2026-08-06 07:41:01 +00:00
get-query-client.ts refactor(web): align query client ownership (#40024) 2026-08-05 07:02:09 +00:00
layout.tsx chore(web): remove obsolete PWA assets (#40082) 2026-08-06 07:41:01 +00:00
query-provider.tsx refactor(web): align query client ownership (#40024) 2026-08-05 07:02:09 +00:00