actionpack/test/controller/redirect_test.rb · cc359c077fadc619dd4d098a3639b6eab22d6a06 · Rails relative code / rails-deleted-2

Dec 05, 2022

wonda-tea-coffee authored Dec 05, 2022

Disallow certain strings from `_url_host_allowed?` to avoid a redirect
to malicious sites.

[CVE-2023-22797]

f6cdce50

wonda-tea-coffee authored Dec 05, 2022

Disallow certain strings from `_url_host_allowed?` to avoid a redirect
to malicious sites.

[CVE-2023-22797]