authelia

techies/authelia

Fork 0

mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00

Commit Graph

Author	SHA1	Message	Date
BankaiNoJutsu	48c204fc68	added all themes, clean and backup of dist, --theme value check	2018-12-18 16:30:23 +01:00
Clement Michaud	42581dfe93	Fix open redirection vulnerability. In order to redirect the user after authentication, Authelia uses rd query parameter provided by the proxy. However an attacker could use phishing to make the user be redirected to a bad domain. In order to avoid the user to be redirected to a bad location, Authelia now verifies the redirection URL is under the protected domain.	2018-11-17 17:48:20 +01:00

Author

SHA1

Message

Date

BankaiNoJutsu

48c204fc68

added all themes, clean and backup of dist, --theme value check

2018-12-18 16:30:23 +01:00

Clement Michaud

42581dfe93

Fix open redirection vulnerability.

In order to redirect the user after authentication, Authelia uses
rd query parameter provided by the proxy. However an attacker could
use phishing to make the user be redirected to a bad domain. In order
to avoid the user to be redirected to a bad location, Authelia now
verifies the redirection URL is under the protected domain.

2018-11-17 17:48:20 +01:00

2 Commits