diff options
| author | Bob Van Landuyt <bob@vanlanduyt.co> | 2018-05-02 20:25:21 +0200 |
|---|---|---|
| committer | Bob Van Landuyt <bob@vanlanduyt.co> | 2018-05-04 13:54:43 +0200 |
| commit | 39916fdfeddfd75279d13fa976fdb07f3b9b0e26 (patch) | |
| tree | 3a05cbb5816d582a72197e417d3fc3539dd6cf59 /app/controllers/projects/commit_controller.rb | |
| parent | 7684217d6806408cd338260119364419260d1720 (diff) | |
| download | gitlab-ce-39916fdfeddfd75279d13fa976fdb07f3b9b0e26.tar.gz | |
Reuses `InternalRedirect` when possible
`InternalRedirect` prevents Open redirect issues by only allowing
redirection to paths on the same host.
It cleans up any unwanted strings from the path that could point to
another host (fe. //about.gitlab.com/hello). While preserving the
querystring and fragment of the uri.
It is already used by:
- `TermsController`
- `ContinueParams`
- `ImportsController`
- `ForksController`
- `SessionsController`: Only for verifying the host in CE. EE allows
redirecting to a different instance using Geo.
Diffstat (limited to 'app/controllers/projects/commit_controller.rb')
0 files changed, 0 insertions, 0 deletions