Skip to content

Test for when an open redirect has a http:// or https:// prefix always added to the injected URL #79

@postmodern

Description

@postmodern

Test when an Open Redirect injection URL always has a http:// or https:// scheme appended to the injected value, but omitting the URI scheme from the test URL (ex: evil.com/path?id=... -> http://evil.com/path?id=). This may require adding an additional keyword argument to OpenRedirect#initialize.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions