New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth: ReturnUrls should be validated to be local #121

Closed
HeyJoel opened this Issue Jun 26, 2017 · 0 comments

Comments

Projects
None yet
1 participant
@HeyJoel
Copy link
Member

HeyJoel commented Jun 26, 2017

When the AuthController redirects, we should validate the return url is local using Url.IsLocalUrl()

@HeyJoel HeyJoel added the bug label Jun 26, 2017

@HeyJoel HeyJoel added this to the 0.1.9 milestone Jun 26, 2017

@HeyJoel HeyJoel closed this in 1d0255f Jun 26, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment