6f9fab1089
- Validate the `idp` parameter to only accept the ones that are known in the config file - URL-encode the `idp` parameter for safety's sake (this is the main fix) Fix https://github.com/matrix-org/internal-config/issues/1651 (internal link) Regressed in https://github.com/element-hq/synapse/pull/17972
2 lines
69 B
Plaintext
2 lines
69 B
Plaintext
Fix open redirect in legacy SSO flow with the `idp` query parameter.
|