Skip to content

登录跳转xss漏洞修复 #45

@zeroChen00

Description

@zeroChen00

xss漏洞示例:
image

修复:

/fastapi_user_auth/admin/admin.py 第118行和第190行
import html
form.redirect = html.escape(request.query_params.get("redirect") or "/")

效果:
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions