Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...

GHSA-V753-G4CW-JM48 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...