nicumicle / simple-jwt-login

This plugin allows you to log in, register, authenticate, delete and change the user password to a WordPress website using a JWT.
http://wordpress.org/plugins/simple-jwt-login/
GNU General Public License v3.0
83 stars 23 forks source link

feature: replace wp_redirect with wp_safe_redirect #115

Open r4topunk opened 2 months ago

r4topunk commented 2 months ago

When testing the redirectUrl param, I saw that it leads to an Open Redirect web security problem.

So changing it to wp_safe_redirect may solve this problem.