0 sats \ 0 replies \ @ek 7 May 2023 \ on: Open redirection issue on "?callbackUrl=" parameter bitcoin
Thanks for posting, I agree this is something that was overlooked!
I think you should actually get paid for finding this open redirect.
More infos in the ticket posted by @orthzar