[ https://issues.apache.org/jira/browse/KNOX-3132?focusedWorklogId=967242&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-967242 ]
ASF GitHub Bot logged work on KNOX-3132: ---------------------------------------- Author: ASF GitHub Bot Created on: 23/Apr/25 13:15 Start Date: 23/Apr/25 13:15 Worklog Time Spent: 10m Work Description: bonampak opened a new pull request, #1027: URL: https://github.com/apache/knox/pull/1027 ## What changes were proposed in this pull request? Adding basic url check and for originalUrl for logout and redirecting jsp. Also encoding urls for javascript and html output. ## How was this patch tested? Tested using a dev cluster. simple login and sso, global logout was also tested with CAS PAC4J demo app. Issue Time Tracking ------------------- Worklog Id: (was: 967242) Remaining Estimate: 0h Time Spent: 10m > Improve URL checks for originalUrl > ---------------------------------- > > Key: KNOX-3132 > URL: https://issues.apache.org/jira/browse/KNOX-3132 > Project: Apache Knox > Issue Type: Task > Components: Homepage > Affects Versions: 2.2.0 > Reporter: Tamás Marcinkovics > Assignee: Tamás Marcinkovics > Priority: Minor > Time Spent: 10m > Remaining Estimate: 0h > > Apart from the whitelist regex, we need to check originalUrl for logout and > redirects. -- This message was sent by Atlassian Jira (v8.20.10#820010)