Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

URL redirect and ValidateIssuer CodeQL bugs #9398

Merged
merged 7 commits into from
Mar 3, 2023
Merged

URL redirect and ValidateIssuer CodeQL bugs #9398

merged 7 commits into from
Mar 3, 2023

Commits on Feb 9, 2023

  1. added Url redirect codeql suppressions

    @advay26
    advay26 committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    c9f3378 View commit details
    Browse the repository at this point in the history

Commits on Feb 22, 2023

  1. codeQL bug = suppression :)

    @advay26
    advay26 committed Feb 22, 2023
    Configuration menu
    Copy the full SHA
    301f451 View commit details
    Browse the repository at this point in the history

  2. moved suppression comment closer to the relevant line of code

    @advay26
    advay26 committed Feb 22, 2023
    Configuration menu
    Copy the full SHA
    f822a7e View commit details
    Browse the repository at this point in the history

Commits on Feb 23, 2023

  1. We are restricting the reCAPTCHA request to a specific host. Changed … 

    …the suppression comment to reflect this as the mitigation for the vulnerability.
    @advay26
    advay26 committed Feb 23, 2023
    Configuration menu
    Copy the full SHA
    e0d8a26 View commit details
    Browse the repository at this point in the history

Commits on Feb 28, 2023

  1. Only allow relative Urls as a return Url. Add/adapt tests.

    @advay26
    advay26 committed Feb 28, 2023
    Configuration menu
    Copy the full SHA
    32491b6 View commit details
    Browse the repository at this point in the history

  2. removed unnecessary usings

    @advay26
    advay26 committed Feb 28, 2023
    Configuration menu
    Copy the full SHA
    c0ed1e1 View commit details
    Browse the repository at this point in the history

Commits on Mar 2, 2023

  1. modified suppression comment for recaptcha redirection

    @advay26
    advay26 committed Mar 2, 2023
    Configuration menu
    Copy the full SHA
    fc25f2c View commit details
    Browse the repository at this point in the history