Skip to content
This repository has been archived by the owner on Jul 24, 2023. It is now read-only.

Avoid SSRF for claimed_id request #121

Merged
merged 1 commit into from
Jun 26, 2019
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion lib/openid/consumer/idres.rb
Original file line number Diff line number Diff line change
Expand Up @@ -72,9 +72,9 @@ def signed_fields
def id_res
check_for_fields
verify_return_to
verify_discovery_results
check_signature
check_nonce
verify_discovery_results
end

def server_url
Expand Down