fix(extensions): re-validate catalog URL after redirects (HTTPS parity/security)#3524

Merged

mnriem merged 3 commits into

github:mainfrom

jawwad-ali:fix/extensions-catalog-redirect-revalidate

Jul 21, 2026

Commits on Jul 18, 2026

fix(extensions): re-validate catalog URL after redirects (HTTPS parity)

jawwad-ali
and
claude
committed
fix(extensions): correct auth-strip comment; validate every redirect hop + guard legacy fetch_catalog

jawwad-ali
and
claude
committed
test(extensions): cover legacy fetch_catalog() per-hop redirect validation

jawwad-ali
and
claude
committed