fastapi-user-auth icon indicating copy to clipboard operation
fastapi-user-auth copied to clipboard
verified publisher icon amisadmin

登录跳转xss漏洞修复

Open zeroChen00 opened this issue 1 year ago • 1 comments

xss漏洞示例： image

修复：

/fastapi_user_auth/admin/admin.py 第118行和第190行
import html
form.redirect = html.escape(request.query_params.get("redirect") or "/")

效果： image

zeroChen00 avatar Aug 26 '24 05:08 zeroChen00