Skip to content

fix(security): secure OAuth callback redirects - #3984

Open
thoniTUB wants to merge 4 commits into
developfrom
fix/remote-soure-redirect
Open

fix(security): secure OAuth callback redirects#3984
thoniTUB wants to merge 4 commits into
developfrom
fix/remote-soure-redirect

review changes

a946ab1
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Sep 3, 2026 in 2s

1 new alert including 1 medium severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 434 in backend/src/main/java/com/bakdata/conquery/models/config/auth/JwtPkceVerifyingRealmFactory.java

See this annotation in the file changed.

Code scanning / CodeQL

URL redirection from remote source Medium

Untrusted URL redirection depends on a
user-provided value
Loading
.
Untrusted URL redirection depends on a user-provided value.
Untrusted URL redirection depends on a user-provided value.