Skip to content

Don't return redirect URI or response mode on unsafe errors#1933

Merged
bhazen merged 1 commit intomainfrom
beh/no-redirecturi-or-respondemode-on-unsafe-error
Apr 1, 2025
Merged

Don't return redirect URI or response mode on unsafe errors#1933
bhazen merged 1 commit intomainfrom
beh/no-redirecturi-or-respondemode-on-unsafe-error

Conversation

@bhazen
Copy link
Contributor

@bhazen bhazen commented Apr 1, 2025

What issue does this PR address?
Stop setting redirect URI and response mode on unsafe errors. The errors have been deemed unsafe to redirect so we should not enable them being presented to users.

Important: Any code or remarks in your Pull Request are under the following terms:

If You provide us with any comments, bug reports, feedback, enhancements, or modifications proposed or suggested by You for the Software, such Feedback is provided on a non-confidential basis (notwithstanding any notice to the contrary You may include in any accompanying communication), and Licensor shall have the right to use such Feedback at its discretion, including, but not limited to the incorporation of such suggested changes into the Software. You hereby grant Licensor a perpetual, irrevocable, transferable, sublicensable, nonexclusive license under all rights necessary to incorporate and use your Feedback for any purpose, including to make and sell any products and services.

(see our license, section 7)

@bhazen bhazen added the area/products/is IdentityServer label Apr 1, 2025
@bhazen bhazen self-assigned this Apr 1, 2025
@bhazen bhazen requested a review from josephdecock as a code owner April 1, 2025 18:09
@bhazen bhazen merged commit 1726bbe into main Apr 1, 2025
19 checks passed
@bhazen bhazen deleted the beh/no-redirecturi-or-respondemode-on-unsafe-error branch April 1, 2025 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/products/is IdentityServer

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants