You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Remove JSONP callback support in modConnectorResponse (#16775)
### What does it do?
Removes the JSONP callback support in modConnectorResponse.
### Why is it needed?
This feature is potentially vulnerable to JSONP injection.
### How to test
Make sure any callback parameters to a connector request are ignored.
### Related issue(s)/PR(s)
#12420 and #13051 — vulnerability was reported privately.
0 commit comments