Skip to content

FIX: Detect url/target params, double-encoded slashes, and backslash bypasses in OpenRedirectOutputScorer (#3324) - #3679

Merged
Roman Lutz (romanlutz) merged 5 commits into
microsoft:mainfrom
Hrushikesh-ramilla:fix/open-redirect-payload-detection-3324
Nov 2, 2026
Merged

FIX: Detect url/target params, double-encoded slashes, and backslash bypasses in OpenRedirectOutputScorer (#3324)#3679
Roman Lutz (romanlutz) merged 5 commits into
microsoft:mainfrom
Hrushikesh-ramilla:fix/open-redirect-payload-detection-3324

FIX: Preserve encoded HTTP(S) redirect authority detection

84a82d2
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 notice
CodeQL (javascript-typescript)
succeeded Nov 2, 2026 in 1m 15s