Repository navigation

Rebase our fork against latest adopted-ember-addons/main + security fixes - #4

Closed

Gaurav0 wants to merge 12 commits into

mainfrom

Closed

Rebase our fork against latest adopted-ember-addons/main + security fixes#4
Gaurav0 wants to merge 12 commits into
mainfrom
scf_master

Commits on Oct 14, 2026
- Use postmessage instead of storage event for embedded case
  Gaurav0
  committed
  a6f5f38
- fix for feature flag off case
  Gaurav0
  committed
  66dacf1
- add test for postmessage in ui-service-mixin
  Gaurav0
  committed
  16e4083
- Fix audit vulnerabilities without major bumps
  
  Gaurav0
  and
  claude
  committed
  75c23b9
- fix(ci): do not test against latest ember (v7)
  Gaurav0
  committed
  5614ac7
- fix(security): only accept torii postMessages from the opened popup
  
  Gaurav0
  and
  claude
  committed
  08fd322
- fix(security): use crypto randomness and a fresh OAuth state per attempt
  
  Gaurav0
  and
  claude
  committed
  8204c1c
- fix(security): verify state for bearer/token providers by default
  
  Gaurav0
  and
  claude
  committed
  41e2559
- fix: harden google-v2 token validation and honor app-wide remoteServiceName
  
  Gaurav0
  and
  claude
  committed
  47fc3d4
Commits on Oct 15, 2026
- fix(security): upgrade ember-qunit to 6 to drop babel-core 6
  
  Gaurav0
  and
  claude
  committed
  f0aaf53
- fix(security): force tmp to ^0.2.7
  
  Gaurav0
  and
  claude
  committed
  a42e645
Commits on Oct 16, 2026
- fix(security): override ansi-html, decode-uri-component and @babel/runtime
  
  Gaurav0
  and
  claude
  committed
  b0a4b07