intridea / omniauth-oauth2 / 65

Builds Branch Commit Type Ran Committer Via Coverage
65 master Comply with rubocop Pull #88 ernesto-jimenez travis-ci pending completion   set done
64 master Allow concurrent authorizations in different tabs Fixes csrf_detected happening when more than one authorization is started in several tabs, which means the session's "omniauth.state" is overridden. Pull #88 ernesto-jimenez travis-ci pending completion   set done
63 master Removed all but 2 gem restrictions Pull #85 jasnow travis-ci pending completion   set done
62 master Neutralize unsafe (non-local) destination params This addresses a cover redirect vulnerability when the following is used as an authentication URL: http://domain.dev/auth/provider?destination=//google.com Covert redirects (https://www.owasp.org... Pull #83 olivierlacan travis-ci pending completion   set done
61 master Neutralize unsafe (non-local) destination params This addresses a cover redirect vulnerability when the following is used as an authentication URL: http://domain.dev/auth/provider?destination=//google.com Covert redirects (https://www.owasp.org... Pull #83 olivierlacan travis-ci pending completion   set done
60 master fix broken backward compatibility (by default, keep the same callback_url in callback_phase and request_phase) Pull #82 zmajstor travis-ci pending completion   set done
59 master fix broken callback_url for backward compatibility (keep the same callback_url in callback_phase and request_phase) Pull #82 zmajstor travis-ci pending completion   set done
58 v1.4.0 Bump version to 1.4.0 push sferik travis-ci pending completion   set done
57 master Bump version to 1.4.0 push sferik travis-ci pending completion   set done
56 master Merge pull request #70 from intridea/dont-override-callback-url Don't override callback_url Attempt to correct #28 push sferik travis-ci pending completion   set done
55 master fixing rubocop problems Pull #77 mynock travis-ci pending completion   set done
54 master updating new specs to use double quoted strings Pull #77 mynock travis-ci pending completion   set done
53 master updating lambda syntax in spec file Pull #77 mynock travis-ci pending completion   set done
52 master updating oauth2 client to accept lambda functions as parameter (for dynamic credential switching in a multitenant environment Pull #77 mynock travis-ci pending completion   set done
51 master Persist the 'state' parameter until a successful callback. We discovered the following issue while using [omniauth-facebook][1]. We are seeing an unexpectedly high number of CSRF violations (roughly 6% of sign-ins) when users return from facebook... Pull #75 jcoglan travis-ci pending completion   set done