Merge pull request #22 from encryption4all/fix/dns-txt-strict-match

fix(security): strict match on DNS TXT verification record

Author: rubenhensen

src/lib/server/services/dns-verification.ts

@@ -40,7 +40,7 @@ export async function verifyDns(orgId: string): Promise<{
 	try {
 		const txtRecords = await resolve(record.domain, 'TXT');
 		const flat = txtRecords.flat();
-		const found = flat.some((txt) => txt.includes(record.txtRecord));
+		const found = flat.some((txt) => txt === record.txtRecord);
 
 		if (found) {
 			await db