visionmedia/express — pull request #973 by alpercelik (2012-01-21 23:58:31+00:00)
Title: added newline character check in url in response.redirect function

currently express framework do not check for newline characters
it is vulnerable to http splitting attack

example:
start the test server https://gist.github.com/1654555

browse http://localhost:3000/?foo=bar%0D%0ASet-Cookie%3Aname%3Dvalue
you will be re redirected to another page and cookie will be set