[keycloak-dev] Open Redirect Vulnerability

Thursday, 16 April 2015

Hi,

    Is KC considering this vulnerability [1] when performing redirects ? Specially for
OAuth Clients doing authorization code grant.

Regards.

[1] http://intothesymmetry.blogspot.ch/2015/04/open-redirect-in-rfc6749-aka-o...