Etienne Stalmans a59b797216 fix: improve redirect validation (#46794) ...

## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

## What kind of change does this PR introduce?

Bug fix

## What is the current behavior?

returnTo is not correctly validated

## What is the new behavior?

returnTo is validated


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Bug Fixes**
* Improved validation of redirect URLs used after organization creation;
when a return URL is provided it is now validated before redirecting,
while auth-related query parameters are still preserved.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-06-12 12:34:24 +02:00

..

AuditLogs

feat(studio): add organization shortcuts (#46356)

2026-05-28 15:48:32 +00:00

BillingSettings

chore(etl): etl add-on forward compat (#46869)

2026-06-12 16:06:55 +08:00

CloudMarketplace

studio(chore): reuse org details fields in AWS marketplace flow (#46087)

2026-05-22 14:10:07 +10:00

Documents

chore: update DPA to June 2026 version (#46558)

2026-06-05 17:29:40 +08:00

GeneralSettings

chore: remove shadcn suffix for Input, Textarea, Alert and Collapsible (#45867)

2026-05-15 14:55:37 +02:00

IntegrationSettings

feat(studio): add organization shortcuts (#46356)

2026-05-28 15:48:32 +00:00

InvoicesSettings

chore: Migrate the monorepo to use Tailwind v4 (#45318)

2026-04-30 10:53:24 +00:00

NewOrg

fix: improve redirect validation (#46794)

2026-06-12 12:34:24 +02:00

OAuthApps

feat(studio): move /authorize to connect interstitial (#46359)

2026-06-08 10:51:04 -06:00

PrivateApps

feat(studio): add organization shortcuts (#46356)

2026-05-28 15:48:32 +00:00

ProjectClaim

chore: remove shadcn suffix for Input, Textarea, Alert and Collapsible (#45867)

2026-05-15 14:55:37 +02:00

SSO

feat(studio): Issuer field in SSO form (#46187)

2026-06-09 16:07:17 +02:00

TeamSettings

fix(studio): show role permission descriptions in edit access drawer (#46627)

2026-06-04 07:41:39 -06:00

Usage

chore: remove _Shadcn_ suffix from Command components (#46153)

2026-05-20 15:45:32 +02:00

HeaderBanner.tsx

chore: Migrate the monorepo to use Tailwind v4 (#45318)

2026-04-30 10:53:24 +00:00

Organization.utils.ts

fix: universal link redirects to general (#43131)

2026-02-24 16:10:30 +01:00

OrganizationCard.tsx

feat(studio): move AWS Marketplace to connect interstitial (#46058)

2026-05-22 13:59:05 +10:00

OrgNotFound.test.tsx

POC: bring back MSW to remove the pattern of vi.mock (#46439)

2026-05-28 12:58:50 +00:00

OrgNotFound.tsx

style: require sorted imports in studio/components (#44408)

2026-04-01 10:22:37 +02:00

restriction.constants.tsx

fix: align grace-period banner copy on org usage page (#45652)

2026-05-07 15:46:22 -07:00

SecuritySettings.tsx

refactor(studio): migrate telemetry to useTrack (#46140)

2026-05-27 15:19:54 +08:00