New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rails 7 redirect options #1755

Merged

presidentbeef merged 2 commits into main from rails7_redirects

Jan 17, 2023

Owner

presidentbeef commented Jan 16, 2023

Intent of these changes:

If config.action_controller.raise_on_open_redirects is true, then for any redirect that looks dangerous:
- If allow_other_host is not specified, no warning
- If allow_other_host is true, low confidence warning
- If allow_other_host is false, no warning

presidentbeef added 2 commits

January 1, 2023 23:13


          Skip open redirect check if open redirects raise

d8ef4e4


          Handle Rails 7 redirect options

c1bcc1b

presidentbeef merged commit 749b664 into main

presidentbeef deleted the rails7_redirects branch

January 17, 2023 07:21

Repository owner locked and limited conversation to collaborators

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet