During March 2026, Peter Wilson developed RFC 8252-compliant loopback redirect support for the Application Password Flow in the peterwilsoncc/wordpress-develop repository. He implemented logic in PHP to enable HTTP redirects for loopback addresses such as 127.0.0.1 and [::1], updating the validation process to accept these while maintaining strict security for non-loopback addresses. Peter also created comprehensive unit tests to verify correct handling and security constraints, ensuring robust validation and alignment with RFC guidance. His work improved the security posture and interoperability of the application password flow, reducing friction for localhost OAuth workflows and enhancing back end reliability.