note about open redirect vulneravility
commite21f09817e62a99f82b5e14236aa2aa29b14a515
authorDavid Stark <david.stark@pusher.com>
dateWed 29 Jan 2020, 12:36 (7 years ago)
parent8c76577
CHANGELOG.md+1−1
@@ -17,7 +17,7 @@
1717- DigitalOcean provider support added
1818
1919## Important Notes
20−N/A
20+- (Security) Fix for open redirect vulnerability.. a bad actor using `/\` in redirect URIs can redirect a session to another domain
2121
2222## Breaking Changes
2323