New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Don't allow redirect from a non-file URL to a file URL for security reasons #455

Merged

knu merged 2 commits into master from disallow_redirect_to_file

Nov 16, 2015

Member

knu commented Nov 16, 2015

Redirect to a file URL may make it easier for remote attackers to obtain sensitive information or cause a DoS.

knu added 2 commits

November 16, 2015 17:41


          Don't allow redirect from a non-file URL to a file URL for security r…

4a585e4

…easons


          Add a reference to the newly created PR [ci skip]

b686d25

Member

leejarvis commented Nov 16, 2015

Nice one, LGTM 👍

knu merged commit b686d25 into master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment