10 Nov
2022
10 Nov
'22
12:47 a.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31699 --- Comment #31 from David Cook <dcook@prosentient.com.au> --- At the moment, with Martin's patches, the following will generate a "ERR_INVALID_REDIRECT": http://localhost:8080/cgi-bin/koha/opac-user.pl?return=http://koha-community... If I erase OPACBaseURL, then I get the open redirect vulnerability again. So now I'll add a patch... -- You are receiving this mail because: You are watching all bug changes.