You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As such we should only flag open redirects that have allow_other_host: true enabled. However we should consider if this is appropriate since some folks may not be on rails 6 or below.
Description & Reproduction
Rails 7 now has open redirect protection meaning the redirect path is evaluated at runtime and external urls are blocked:
https://api.rubyonrails.org/classes/ActionController/Redirecting.html#method-i-redirect_to-label-Open+Redirect+protection
As such we should only flag open redirects that have
allow_other_host: true
enabled. However we should consider if this is appropriate since some folks may not be on rails 6 or below.Expected Behavior
Raises a finding
Actual Behavior
Raises a finding
The text was updated successfully, but these errors were encountered: