PT-2026-39163

Summary webauthn-rs-core Relying Partyrp and webauthn-authenticator-rs client checked that an Origin in CollectedClientDataorigin is valid for an RP IDrpid with str::ends withends-with, without checking for a dot . before the RP ID when allowing subdomainsregisterable-suffix. This check is flawed...