#5770 - Forms specifying a redirect in the action are blocked by CSP

This is a spacer post for a website comment topic. The content this topic relates to: #5770 - Forms specifying a redirect in the action are blocked by CSP
By Guest posted
Automated message: This issue was created using the Report Issue Wizard on the Composr homesite.
By Guest posted
protect_url_parameter is supposed to be used. Also modify the function comment for protect_url_parameter, _protect_url_parameter, and comment in global2.php against INPUT_FILTER_MODSECURITY_URL_PARAMETER, to also mention browser reflected-XSS filtering.
By Guest posted
I added several missing protect_url_parameter but I cannot consider this issue resolved because top_login was not one of them from which this issue originates.

top_login gets login URL (+ redirect) from global3.php get_login_url but this is already using protect_url_parameter. So there is another bug somewhere.
0 guests and 0 members have recently viewed this.