mirror of https://github.com/jacekkow/keycloak-protocol-cas
parent: 758ec0 | patch | commitdiff
Ricardo Martin
2024-04-18 9aa92ee9a213ebd78e12a22cf93b60ce9eb7b3f7
refs
author Ricardo Martin <rmartinc@redhat.com>
Thursday, 18 April 2024 14:02 +0000
committer GitHub <noreply@github.com>
Thursday, 18 April 2024 14:02 +0000
commit9aa92ee9a213ebd78e12a22cf93b60ce9eb7b3f7
tree be86d94e9344b22a58275502453762d1f2562ce8 tree | zip | gz | bzip2
parent 758ec09cc170c769c8fcc7960aa65671ea159add view | diff 
Perform exact string match if redirect URI contains userinfo, encoded slashes or parent access (#131) (#28872)

Closes keycloak/keycloak-private#113
Closes keycloak/keycloak-private#134

Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
1 files modified
97 ■■■■■ changed files
src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java 97 ●●●●● diff | view | raw | blame | history