All rules →
Rules / JavaScript / TypeScript
SHIELD-JS-013

Open redirect via res.redirect

mediumJavaScript / TypeScriptCWE-601CVSS 6.1

What it detects

Redirecting to user-controlled URLs without validation allows open redirect attacks.

How to fix

Validate redirect URLs against an allowlist of trusted destinations.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JS-013: Open redirect via res.redirect — Zennoxa Shield