fix(auth): sanitize authorization URL

Author: superboy-zjc

client/src/lib/auth.ts

@@ -129,6 +129,9 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider {
   }
 
   redirectToAuthorization(authorizationUrl: URL) {
+    if (authorizationUrl.protocol !== "http:" && authorizationUrl.protocol !== "https:") {
+      throw new Error("Authorization URL must be HTTP or HTTPS");
+    }
     window.location.href = authorizationUrl.href;
   }