rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8095ac6233663400058113de10abda97db7e1dc7
probo/pkg/server/api/trust
History
Bryan Frimin 8095ac6233 Validate session transfer redirect with saferedirect 
The session transfer handler was blindly redirecting to the continue URL
from the signed token. Use saferedirect with a trust center domain check
to prevent open redirects, and only trigger session transfer for known
trust center custom domains instead of any non-base-URL host.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-31 14:49:21 +02:00
..
v1
Validate session transfer redirect with saferedirect
2026-03-31 14:49:21 +02:00