supabase / auth / 14193954875

69%

push

github

fix: sanitize redirect URL (remove fragment, query) before pattern matching (#1974)

Redirect URL was not being sanitized (query and fragment not being
stripped) before being pattern matched on the allowed URL globs. This
made it possible in some cases to produce an insecure redirect.

4 of 4 new or added lines in 1 file covered. (100.0%)

10493 of 15416 relevant lines covered (68.07%)

64.29 hits per line