adorsys / adorsys/open-banking-gateway
Harden redirection URLs
Ouverte
BE
good first issue
low priority
- Langage dominant
- Java
- Étoiles
- 338
- Forks
- 122
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
As redirection URL is computed value that may come from 3rd party protocol, in order to protect user from phishing attacks, we need to add:
- [ ] API level whitelisting - redirect on endpoints only on whitelisted regex (global) - application.yml
- [ ] Facade level whitelisting - Facade should report redirects only to allowed whitelist entry per bank (per bank) - database table
Guide de contribution
Aucun guide de contribution indexé pour ce dépôt
Évaluation
Cette issue n'a pas encore été évaluée.