Skip to content

1.16.0

Latest
Latest

Choose a tag to compare

View all tags
@spryker-release-bot spryker-release-bot released this 18 Mar 08:44
· 1 commit to master since this release
1.16.0
c19f1c6

Included commits: 1.15.0...1.16.0

Improvements

  • Introduced HttpService::isRequestEligibleForRedirect() to determine whether a request is a valid candidate for post-login redirect, excluding AJAX requests, non-GET methods, authentication paths, and internal
    framework paths.
  • Introduced HttpService::isValidRelativeUrl() to validate that a URL is a safe relative redirect target, rejecting absolute URLs, protocol-relative URLs, and any value not starting with /.
  • Introduced HttpConfig::getInternalPathPrefix(), HttpConfig::getAuthenticationPathPattern(), HttpConfig::getAcceptHeaderHtml(), and HttpConfig::getHttpHeaderAccept() to configure redirect eligibility checks.
Assets 2
Loading