iris/core
wozz 923d151190 Fix open redirect
Fix open redirect by using strings.Trim.

Another option would be to use path.Clean similar to here, but I'm unsure of side effects that may have for this use case: https://github.com/golang/go/blob/master/src/net/http/server.go#L2034

See a PoC of this issue with this link: https://iris-go.com//google.com/

Former-commit-id: fa422e436353a7e0699f0b346f3679455c5d965b
2018-04-20 16:49:30 -07:00
..
errors update vendor 2018-04-03 13:07:23 +03:00
handlerconv Update to 8.2.3 | Fix https://github.com/kataras/iris/issues/714 2017-08-10 21:15:26 +03:00
host core/router/supervisor:https ForceRSA to true 2018-03-31 06:38:30 +03:00
maintenance Do not create the global configuration in homedir by-default, as, correctly, requested on chat. Use iris.WithGlobalConfiguration with a pre-defined iris.yml file on your home directory, existing users will not have any issues, new one will have to create the file before 2018-03-27 09:59:29 +03:00
memstore Update to version 10.5.0 | Read HISTORY.md for more 2018-03-24 10:39:44 +02:00
netutil NEW: Application#SubdomainRedirect. Example: https://github.com/kataras/iris/blob/master/_examples/subdomains/redirect/main.go 2018-01-20 05:17:31 +02:00
router Fix open redirect 2018-04-20 16:49:30 -07:00