Repository navigation

JS: treat the base argument of URL as tainted in request forgery queries - #23089

Open

ebickle wants to merge 2 commits into

github:mainfrom

ebickle:js/request-forgery-url-base

Open

JS: treat the base argument of URL as tainted in request forgery queries#23089
ebickle wants to merge 2 commits into
github:mainfrom
ebickle:js/request-forgery-url-base

Commits on Nov 10, 2026
- JS: treat the base argument of URL as tainted in request forgery queries
  ebickle
  committed
  c114f67
- JS: don't taint the URL base when the first argument is absolute
  ebickle
  committed
  9f56716