omniauth / omniauth / 39517408740

100%

push

github

Update the README's version info and warn about open redirects

The Supported Ruby Versions section stopped at Ruby 3.2 and didn't
mention Rack, and the Versioning section still suggested depending on
'~> 1.0'.

omniauth.origin comes from a request param or the Referer header, so
redirecting to it unchecked is an open redirect. Say so, with an
example that only follows local paths, and note that omniauth.params
is user input too.

173 of 173 branches covered (100.0%)

644 of 644 relevant lines covered (100.0%)

42.21 hits per line