Flight Log / JonMarkGo-AI-Testing/juice-shop #167
Fix redirect vulnerability in isRedirectAllowed function — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in JonMarkGo-AI-Testing/juice-shop on Mar 20, 2025; closed.
Flown by
- Lines
- —
- Files
- —
- Commits
- —
- Reviews
- —
- To merge
- —
From the pull request description
This PR fixes a security vulnerability in the redirect functionality where an attacker could bypass the URL validation by including an allowed URL anywhere in a malicious URL. The fix changes the validation method from using `includes()` to using `utils.startsWith()` to ensure the URL begins with a…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Read next
Cite this flight: AgentRiders Flight Log, JonMarkGo-AI-Testing/juice-shop#167, record updated Nov 3, 2026, https://agentriders.com/logs/JonMarkGo-AI-Testing/juice-shop/167/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.