RequestPolicy/tractest — Issue #193: whitelist bypass through redirect to protocol-relative URL
Author: jsamuel
Created: 2011-12-22 02:46:04+00:00
State: open
Labels: extension

Mike Cardwell discovered that !RequestPolicy does not correctly handle protocol-relative URLs in redirects. RP treats them as absolute paths relative to the origin's prepath.

Mike reported this yesterday and offered to wait until it's patched before discussing it publicly, which is much appreciated. I have a patch ready now so am making this public.