Uploaded image for project: 'OpenId Connect'
  1. OpenId Connect
  2. OIDC-105

Enforce redirection in case trusted domain are not properly configured

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 1.25
    • 1.24
    • Authenticator
    • None
    • XWiki 13.3+
    • Unknown

    Description

      XWiki 13.3RC1 and 12.10.7 introduced a trusted domain policy that might prevent users redirection. There's a bypass mechanism for extensions, that we should use here.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-10309 Phishing Through URL Redirection

          • Major - Major loss of function.
          • Closed

          Activity

            People

              tmortagne Thomas Mortagne
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: