fix(iframe-app): harden Frame Blade auth-token handling (CodeQL js/user-controlled-bypass) - #9372

Open

Riley Evans (rllyy97) wants to merge 2 commits into

mainfrom

rllyy97-fix-code-scanning-88

Commits on Jul 7, 2026

fix(iframe-app): harden Frame Blade auth-token handling (CodeQL js/user-controlled-bypass)

Riley Evans (rllyy97)
and
Copilot
committed
058dc57
docs(iframe-app): clarify auth-token guard rationale in comment

Riley Evans (rllyy97)
and
Copilot
committed
89c2975