Repository navigation

FIX: Support user:password credentials and IPv4 destinations in OpenRedirectOutputScorer (#3259) - #3260

Merged

Roman Lutz (romanlutz) merged 5 commits into

microsoft:mainfrom

Kaap10:fix/open-redirect-userinfo-confusion

Oct 18, 2026

Merged

FIX: Support user:password credentials and IPv4 destinations in OpenRedirectOutputScorer (#3259)#3260
Roman Lutz (romanlutz) merged 5 commits into
microsoft:mainfrom
Kaap10:fix/open-redirect-userinfo-confusion

Commits on Oct 16, 2026
- FIX: Support user:password credentials and IPv4 destinations in OpenRedirectOutputScorer (#3259)
  Vardhman Gupta (Kaap10)
  committed
  7af9cdb
Commits on Oct 17, 2026
- FIX: Enforce host boundary and optional port on destinations in OpenRedirectOutputScorer
  Vardhman Gupta (Kaap10)
  committed
  7a36ae8
- FIX: Support empty/zero-padded ports and Punycode TLDs in OpenRedirectOutputScorer
  Vardhman Gupta (Kaap10)
  committed
  3f3b2f2
Commits on Oct 18, 2026
- Merge branch 'main' into fix/open-redirect-userinfo-confusion
  Roman Lutz (romanlutz)
  authored
  d8ae8d6
- Merge branch 'main' into fix/open-redirect-userinfo-confusion
  Roman Lutz (romanlutz)
  authored
  0f02117