Stop open redirects after login
Not solvedThe login page redirects to any ?next= value. Allow same-site paths only.
- Level
- Foundational
- Estimated time
- ~15 min
- Points
- 0/50 pts
- Questions
- 0/0 answered
- OWASP
- A01:2025
- CWE
- CWE-601
redirect.js
Test results
Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.