Skip to content

handlers: reject protocol-relative URLs in redirect validation - #5281

Open
adilburaksen wants to merge 2 commits into
google:masterfrom
adilburaksen:fix/open-redirect-protocol-relative
Open

handlers: reject protocol-relative URLs in redirect validation#5281
adilburaksen wants to merge 2 commits into
google:masterfrom
adilburaksen:fix/open-redirect-protocol-relative

Reject backslash and control/whitespace bypasses in redirect validation

b188f3e
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Jun 11, 2026 in 6s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ b188f3e Author: @adilburaksen <adi******sen​@gmail.com>, <56400880+adilburaksen​@users.noreply.github.com>

(Only the first commit for a unique contributor is listed.)

View more details on Google CLA