Unauthenticated event dispatch via persistent redirected WebSocket

Authentication bypass in djust before 1.0.4 allows remote attackers to invoke gated LiveView event handlers over WebSockets. LiveViewConsumer.handle_mount sends a navigate frame on an authentication or on_mount redirect but leaves self.view_instance and the socket active; handle_event then dispatches untrusted event frames without rechecking access. Exploitation requires a raw WebSocket client plus a gated view path and event name, and consequences are limited to reads or mutations implemented by that application's handlers.