Fix crypto storage L9-L10, error-based SQLi L1-4, open redirect L1-4 - #207

Closed

beanbeah wants to merge 2 commits into

OWASP-CTF:dc34-ctffrom

beanbeah:ctf/r2-batch-04

Commits on Aug 9, 2026

Fix crypto storage (L9 salted SHA-256, L10 bcrypt), error-based SQLi L1-4 (parameterized queries), open redirect L1-4 (same-origin allowlist)

beanbeah
and
claude
committed
7b661f5
fix(open-redirect): replace bypassable same-origin check with fixed allowlist (L1-4)
beanbeah
committed
670e682