What's Changed
- fix(frontend): validate OAuth redirect paths by @hiddeco in #1693
- fix(frontend): eliminate innerHTML XSS vectors by @hiddeco in #1692
- fix: exempt agentic search v2 from timeout, add CTTI description by @marc-rutzou in #1697
Full Changelog: v0.9.48...v0.9.49