mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 04:27:02 +01:00
94b7285cbb
RFC 6749 once again reminds us that given the room to do silly things, RFC authors absolutely will. In this case, it's query parameters in redirection uris which are absolutely horrifying and yet, here we are. We strictly match the query pairs during the redirection to ensure that if a query pair did allow open redirection, then we prevent it. |
||
|---|---|---|
| .. | ||
| core | ||
| daemon | ||
| lib | ||
| lib-macros | ||
| testkit | ||
| testkit-macros | ||
| builder.sh | ||
| Dockerfile | ||