SecurityInnovation/TMContentReview — Issue #68: Don't Use Redirects or Forwards if Possible
Author: SergeTruth
Created: 2011-11-07 22:30:06+00:00
State: open

This is an unreasonable blanket statement. Most MVC based architectures rely on RequestDispatcher.forward() or ResquestDispatcher.include().

The Problem Example talks about an "open redirect" not a generic redirect. Banning all redirects is overreaching.