fix: prevent session token exfiltration via external app URLs#26146

zedkipp merged 3 commits into

maincoder/coder:mainfrom

zedkipp/plat-266-token-leakcoder/coder:zedkipp/plat-266-token-leakCopy head branch name to clipboard