Sacha Al Himdani 8ed6f1824f Fix unvalidated URL redirection in HTTP redirects ...

Use baseurl.Parse to construct the HTTPS redirect URL in the
trust center HTTP handler, breaking the taint chain from raw
request headers. Apply path.Clean to the slug-based redirect
in stripTrustPrefix to normalize path traversal sequences.

Addresses CodeQL go/unvalidated-url-redirection (CWE-601).

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

2026-03-19 17:27:51 +01:00

..

agent

Style

2026-03-16 00:28:47 +01:00

agents

Fix Anthropic requests failing due to missing MaxTokens in agent configuration

2026-03-13 18:24:02 +01:00

awsconfig

Use go 1.26 syntax

2026-03-06 15:00:42 +01:00

baseurl

Fix baseurl comments on AppendPath and WithPath

2026-02-02 13:32:59 +04:00

bearertoken

Rewrite identity and access management

2026-01-17 10:07:34 -08:00

bootstrap

Fix bootstrap YAML round-trip tests

2026-03-18 15:35:01 +01:00

certmanager

Style

2026-03-16 00:28:47 +01:00

cli

Handle case-insensitive URI schemes in host normalization

2026-03-18 17:28:05 +01:00

cmd

Run go fix and go fmt

2026-03-19 16:37:51 +01:00

connector

Fix golint errors

2026-02-02 18:42:50 +01:00

coredata

Run go fix and go fmt

2026-03-19 16:37:51 +01:00

crypto

Remove deadcode

2026-03-13 17:18:02 +01:00

docgen

Add implemented state and justification to controls

2026-03-17 11:01:04 +01:00

esign

Add file visibility (PRIVATE/PUBLIC) + public files API

2026-03-18 19:19:04 +01:00

file

Add file visibility (PRIVATE/PUBLIC) + public files API

2026-03-18 19:19:04 +01:00

filemanager

Use go 1.26 syntax

2026-03-06 15:00:42 +01:00

filevalidation

Fix multiline function call style violations

2026-03-17 15:59:26 +01:00

gid

Remove deadcode

2026-03-13 17:18:02 +01:00

html2pdf

Run go fmt/fix

2026-03-13 14:48:13 +01:00

iam

Fix organization profile using owner's full name instead of org name

2026-03-19 11:38:04 +01:00

llm

Fix multiline function call style violations

2026-03-17 15:59:26 +01:00

mail

Plug trust center part 1

2026-01-17 12:34:23 -08:00

mailer

Fix multiline function call style violations

2026-03-17 15:59:26 +01:00

mailman

Fix multiline function call style violations

2026-03-17 15:59:26 +01:00

page

Clamp pagination size in page.NewCursor

2026-03-19 11:09:00 +01:00

probo

Run go fix and go fmt

2026-03-19 16:37:51 +01:00

probod

Fix unvalidated URL redirection in HTTP redirects

2026-03-19 17:27:51 +01:00

saferedirect

Style

2026-03-16 00:28:47 +01:00

securecookie

Remove deadcode

2026-03-13 17:18:02 +01:00

securetoken

Rewrite identity and access management

2026-01-17 10:07:34 -08:00

server

Fix unvalidated URL redirection in HTTP redirects

2026-03-19 17:27:51 +01:00

slack

Remove useless encryption key injections

2026-03-11 14:42:37 +04:00

slug

Fix slug logic

2025-07-14 12:38:07 +02:00

statelesstoken

Rewrite identity and access management

2026-01-17 10:07:34 -08:00

trust

Add document archiving

2026-03-19 14:15:54 +01:00

validator

Style

2026-03-16 00:28:47 +01:00

version

Style

2026-03-16 00:28:47 +01:00

watermarkpdf

Introduce pkg/mail.Addr

2025-12-15 18:24:00 +01:00

webhook

Run go fmt/fix

2026-03-13 14:48:13 +01:00