[OAuth2] Login hint support

[24c02]

h/t @dhamariT

[sentry]

Bug: URI.parse(@return_to) lacks error handling for malformed URLs, leading to an unrescued URI::InvalidURIError and application crash.
_{Severity: CRITICAL | Confidence: High}

🔍 Detailed Analysis

If a malformed URL is passed as the return_to parameter, the URI.parse(@return_to) call on line 17 will raise an unrescued URI::InvalidURIError, causing the application to crash. This creates a denial-of-service vulnerability, disrupting the authentication flow.

💡 Suggested Fix

Wrap URI.parse(@return_to) in a begin...rescue URI::InvalidURIError block to handle malformed URLs gracefully, preventing application crashes.

🤖 Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: app/controllers/static_pages_controller.rb#L17

Potential issue: If a malformed URL is passed as the `return_to` parameter, the
`URI.parse(@return_to)` call on line 17 will raise an unrescued `URI::InvalidURIError`,
causing the application to crash. This creates a denial-of-service vulnerability,
disrupting the authentication flow.

_{Did we get this right? 👍 / 👎 to inform future reviews.
Reference ID: 6251664}