SpringSource/spring-security — pull request #34 by mzasada (2013-06-12 14:17:25+00:00)
Title: SEC-2177: Striping off all leading schemes

Striping off all leading schemes in the DefaultRedirectStrategy, so it will be less vulnerable to open redirect phishing attacks.
This change is desired for our product, so either we'll copy source code and adjust ContextRelativeRedirectStrategy to our needs, or we’ll wait and use modified SpringSecurity’s component (which is obviously more preferable solution).
More details can be found at SEC-2177 JIRA issue.

I have signed and agree to the terms of the SpringSource Individual Contributor License Agreement.