Validate redirect domains in auth controllers #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

KroderDev merged 1 commit into main from codex/validate-redirect-urls-in-redirectsifrequested

Aug 14, 2025

Owner

KroderDev commented Aug 14, 2025

Summary

prevent external redirects by validating redirect parameters
allow configurable redirect host allow list
block unsafe redirects in authentication controllers tests

Testing

composer run print-test
composer test

https://chatgpt.com/codex/tasks/task_e_689d6d91d790833395beb2c9ae9c95a4


          Validate redirect parameter domains

4ee667d

KroderDev added the codex label

— with

ChatGPT Codex Connector

KroderDev merged commit 7bb9c74 into main

1 check passed

KroderDev deleted the codex/validate-redirect-urls-in-redirectsifrequested branch

August 14, 2025 05:34

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels