XSS on error parameter when redirected.

threefoldtech / 0-hub

Threefold Images Hub

https://hub.grid.tf

Apache License 2.0

1 stars 1 forks source link

Closed MathiasDeWeerdt closed 4 years ago

MathiasDeWeerdt commented 4 years ago

When the user cancels an attempt they are redirected to the following page: "https://hub.grid.tf/callback_threebot?error=CancelledByUser"

The 'error' parameter should be cleaned because XSS is possible.