All rules →
Rules / Ruby
SHIELD-RUBY-021

Open redirect via redirect_to with params

mediumRubyCWE-601CVSS 6.1

What it detects

Redirecting to a URL taken from params lets attackers send users to arbitrary sites.

How to fix

Redirect only to validated internal paths or set allow_other_host to false.

Scan your repo freeFull documentation
Back to all rules
SHIELD-RUBY-021: Open redirect via redirect_to with params — Zennoxa Shield