39916fdfed
`InternalRedirect` prevents Open redirect issues by only allowing redirection to paths on the same host. It cleans up any unwanted strings from the path that could point to another host (fe. //about.gitlab.com/hello). While preserving the querystring and fragment of the uri. It is already used by: - `TermsController` - `ContinueParams` - `ImportsController` - `ForksController` - `SessionsController`: Only for verifying the host in CE. EE allows redirecting to a different instance using Geo. |
||
|---|---|---|
| .. | ||
| checks_collaboration_spec.rb | ||
| continue_params_spec.rb | ||
| controller_with_cross_project_access_check_spec.rb | ||
| group_tree_spec.rb | ||
| internal_redirect_spec.rb | ||
| issuable_collections_spec.rb | ||
| lfs_request_spec.rb | ||
| send_file_upload_spec.rb | ||