fix: mitigate allowed redirect domain bypass #19

	name: ci

	on:
	push:
	branches: [main] # pushes TO main
	pull_request:
	branches: [main] # pull requests AGAINST main

	# cancel CI runs when a new commit is pushed to any branch except main
	concurrency:
	group: "test-${{ github.ref }}"
	cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

	jobs:
	test:
	runs-on: ubuntu-latest

	strategy:
	matrix:
	# build against the two latest releases, to match golang's release
	# policy: https://go.dev/doc/devel/release#policy
	go-version:
	- 'stable'
	- 'oldstable'

	steps:
	- uses: actions/setup-go@v5
	with:
	go-version: ${{matrix.go-version}}

	- uses: actions/checkout@v4

	- name: test
	run: make testci

	- uses: codecov/codecov-action@v3
	if: ${{ matrix.go-version == 'stable' }}

	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: 'stable'

	- uses: golangci/golangci-lint-action@v3
	with:
	version: latest

Provide feedback