Skip to content

Only include path + query in redirect targets#282

Merged
markstory merged 1 commit intomasterfrom
issue-281
Sep 6, 2019
Merged

Only include path + query in redirect targets#282
markstory merged 1 commit intomasterfrom
issue-281

Conversation

@markstory
Copy link
Member

Including the host and protocol can lead to open redirect issues. Also improve the documentation around using the unauthenticatedRedirect option to safeguard against open redirects.

Refs #281

Including the host and protocol can lead to open redirect issues. Also
improve the documentation around using the unauthenticatedRedirect
option to safeguard against open redirects.

Refs #281
@markstory markstory added this to the 1.1.x milestone Sep 4, 2019
@markstory markstory merged commit d7659d5 into master Sep 6, 2019
@markstory markstory deleted the issue-281 branch September 6, 2019 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant