Unvalidated Redirects and Forwards

Detects HTTP redirects to user-controlled URLs, enabling phishing and server-side request forgery.

zakirkun Updated

File contents

Unvalidated Redirects and Forwards

Overview

Detects HTTP redirects to user-controlled URLs, enabling phishing and server-side request forgery.

Remediation

Validate redirect URLs. Avoid using user input directly; map input to internal routing enums instead.

zakirkun/ice-tea/tree/main/skills/web/open-redirect commit c0b32405d2

Frequently asked questions

npx skillmds@latest add zakirkun/unvalidated-redirects-and-forwards