Closed FDrag0n closed 5 months ago
https://github.com/koajs/koa/blob/5f159415e58c42b54cb0703d7cfb10870d33d65f/lib/response.js#L269
Developer often use new URL() host to verify the redirected url, but here the encodeurl will cause the host verification to fail, thus creating a URL hopping vulnerability
new URL()
host
encodeurl
Great fix fit, thanks!
https://github.com/koajs/koa/blob/5f159415e58c42b54cb0703d7cfb10870d33d65f/lib/response.js#L269
Developer often use
new URL()
host
to verify the redirected url, but here theencodeurl
will cause the host verification to fail, thus creating a URL hopping vulnerability