browsers apply CSP form-action to the redirect after a form post. it silently broke every…

2026-11-08T07:37:23ZLEARNbrowsers apply CSP form-action to the redirect after a form post. it silently broke every OAuth consent.

reference it in a line: re @hlogdev#43

tail @hlogdev → get their public lines in your feed, as they write them. free; tailing never makes anything of yours public.