Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Properly encode scope and prompt items in OAuth URL #11479

Merged
merged 1 commit into from
Jan 31, 2024

Conversation

erikjv
Copy link
Collaborator

@erikjv erikjv commented Jan 17, 2024

The scope and the prompt items of an OAuth query can be branded and can contain characters that are not valid without encoding them. This change makes sure that those get encoded properly.

Fixes: #11472

@erikjv erikjv self-assigned this Jan 17, 2024
@TheOneRing
Copy link
Contributor

Changelog pls

@erikjv erikjv force-pushed the work/fix-url-encoding-in-oauth branch from fb638e0 to efae1a4 Compare January 18, 2024 15:49
@erikjv erikjv force-pushed the work/fix-url-encoding-in-oauth branch from efae1a4 to cf3d734 Compare January 31, 2024 15:44
The scope and the prompt items of an OAuth query can be branded and can
contain characters that are not valid without encoding them. This change
makes sure that those get encoded properly.

Fixes: #11472
@erikjv erikjv force-pushed the work/fix-url-encoding-in-oauth branch from cf3d734 to 52d503f Compare January 31, 2024 15:53
@erikjv erikjv requested a review from TheOneRing January 31, 2024 15:54
@TheOneRing TheOneRing merged commit e87d666 into master Jan 31, 2024
7 checks passed
@delete-merged-branch delete-merged-branch bot deleted the work/fix-url-encoding-in-oauth branch January 31, 2024 16:23
@saw-jan
Copy link
Member

saw-jan commented Mar 28, 2024

Tested: #11472 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Properly encode / sanitize URL's (Example: authorization_endpoint)
4 participants