Skip to content
This repository has been archived by the owner on Apr 12, 2023. It is now read-only.

Add protections for open redirects #3

Open
tommyschaefer opened this issue Jan 29, 2020 · 0 comments
Open

Add protections for open redirects #3

tommyschaefer opened this issue Jan 29, 2020 · 0 comments
Labels
enhancement 🎉 A new feature or an improvement on an existing one

Comments

@tommyschaefer
Copy link
Member

Currently the proceed_to URL has no verification on it. This means that someone could accidentally use a proceed_to URL that's external to the Rails app. This presents a security risk because identity information would be available through the request parameters.
@tommyschaefer tommyschaefer added the enhancement 🎉 A new feature or an improvement on an existing one label Jan 29, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement 🎉 A new feature or an improvement on an existing one
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tommyschaefer