simpleTechs/dpd-passport — pull request #2 by robotnic (2014-05-09 13:33:01+00:00)
Title: Remove session id from redirectURL

Is there a reason for sid and uid in the redirectURL?
For me that looks like a security problem.
sid and uid are in the referrer if external links are used.