build1 publisher
cas-authentication-user's redirect fix falls back to a request path Node parses as //bad.example.com
The isSafeReturnTo guard added in 0.3.0 refuses //host and /\host correctly. It then falls back to the path the request arrived on, and url.parse reports /\bad.example.com with a pathname of //bad.example.com.
Publishers:dev.to
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap−10
- Incentives45
- Confidence62