Skip to content

JS: treat the base argument of URL as tainted in request forgery queries - #23089

Open
ebickle wants to merge 2 commits into
github:mainfrom
ebickle:js/request-forgery-url-base
Open

JS: treat the base argument of URL as tainted in request forgery queries#23089
ebickle wants to merge 2 commits into
github:mainfrom
ebickle:js/request-forgery-url-base

JS: don't taint the URL base when the first argument is absolute

9f56716
Select commit
Loading
Failed to load commit list.
GitHub License Compliance / License compliance check succeeded Nov 10, 2026 in 1s

No new license compliance alerts in code changed by this pull request

This check concluded as success.

Details

[2026-11-10T22:05:48.138213Z] Starting license check...
[2026-11-10T22:05:48.283633Z] Evaluating dependencies against license policy...
[2026-11-10T22:05:48.714402Z] ✓ License check passed

View more details on GitHub License Compliance