adorsys / adorsys/open-banking-gateway
Harden redirection URLs
未关闭
BE
good first issue
low priority
- 主要语言
- Java
- 星标
- 338
- 派生
- 122
- PR 合并指标
- 30 天内没有已合并 PR
描述
As redirection URL is computed value that may come from 3rd party protocol, in order to protect user from phishing attacks, we need to add:
- [ ] API level whitelisting - redirect on endpoints only on whitelisted regex (global) - application.yml
- [ ] Facade level whitelisting - Facade should report redirects only to allowed whitelist entry per bank (per bank) - database table
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。