Benutzer:MovGP0/ASP.NET Core/Open Redirection Attack

MovGP0

Über mich

Hilfen

Artikel

Weblinks

Literatur

Zitate

Notizen

Programmierung

MSCert

Physik

Programmierung ASP.NET Common OWIN • Razor • WebForms • MVC • WebAPI Core Configuration • Data Protection API • Dependency Injection • Routing Attack Vectors HTTPS • HSTS • HPKP • CSP • CSRF • Anti-XSS • CORS • Open Redirection • Click-Jacking Libraries OpenID • Azure AD

Open Redirection Attack

• Redirects to a different domain by manipulating a link.

  http://bank.com/Accoint/LogOn?returnUrl=http://bank.net/Account/LogOn

• Check redirection-URLs for a valid domain

|}