Restrict redirect hosts in login flow #198

Open

Assignees

opened

on Mar 14, 2026

The redirect url right now is not validated against a list of restricted host names. A configuration has to be introduced restricting the hosts the user could be redirected to.

Metadata

Assignees

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests