Merge pull request #966 from CHTJonas/patch-1
Add vulnerability warning to README
This commit is contained in:
commit
894cb9c2f6
|
@ -120,6 +120,8 @@ environment information on the callback request. It is entirely up to
|
|||
you how you want to implement the particulars of your application's
|
||||
authentication flow.
|
||||
|
||||
**Please note:** there is currently a CSRF vulnerability which affects OmniAuth (designated [CVE-2015-9284](https://nvd.nist.gov/vuln/detail/CVE-2015-9284)) that requires mitigation at the application level. More details on how to do this can be found on the [Wiki](https://github.com/omniauth/omniauth/wiki/Resolving-CVE-2015-9284).
|
||||
|
||||
## Configuring The `origin` Param
|
||||
The `origin` url parameter is typically used to inform where a user came from and where, should you choose to use it, they'd want to return to.
|
||||
|
||||
|
|
Loading…
Reference in New Issue