changelogs/unreleased/security-open-redirect-internalredirect.yml · 8b69a3964e6daefcdd11be6ddaa8f51a870b62f6 · nexedi / gitlab-ce · GitLab

Find file Blame History Permalink

Use the '\A' and '\z' regex anchors in `InternalRedirect` to mitigate an Open Redirect issue. · 4b38003d
Joern Schneeweisz authored Oct 22, 2019
```
Fixes https://dev.gitlab.org/gitlab/gitlabhq/issues/2934 and https://gitlab.com/gitlab-org/gitlab/issues/33569
```
4b38003d

security-open-redirect-internalredirect.yml 100 Bytes