Issue #268: XSS and open redirect on WWSympa#411

Merged

ikedas merged 2 commits intosympa-community:sympa-6.2from ikedas:issue-268

Sep 15, 2018

+36-8

Commits on Sep 7, 2018

Minimal fixes for open redirect flaw.
ikedas
committed

Commits on Sep 8, 2018

Additional fix for open redirect flaw: Allow referer and failure_referer parameters only within scope of cookie domain.
ikedas
committed