Technical Mailing lijst archieven

technical@mail.odoo.com

Avatar

Re: Odoo website dangerous redirection

door
Menara Services, Othmane Ghandi
- 12-10-2018 13:45:18
Hi Richard

It's dangerous because normally a simple user pay attention to your domain name (server_name) the most. so when he will see your domain name is correct he will access to the website, at this time he will be redirected to the other malicious websites ==> They can get any data/information that the user will write it there.

So is any one can help on this please ?

Kind Regards

NB: Maybe the word Dangerous is too strong to describe this issue, but still a very serious issue

Othmane Ghandi
----------------------------------------------------------------------------------------------------------------------------------------------
''Where others see limitations, we see possibilities''
"les bonnes choses viennent à ceux qui savent attendre. Les grandes choses viennent à ceux qui se lèvent et qui font tout pour y arriver"
-----------------------------------------------------------------------------------------------------------------------------------------------
          http://www.viadeo.com/profile/0021ck3b96kz2yq4                                          
: othmane.ghandi
: +212 6 00 45 96 84


Le ven. 12 oct. 2018 à 18:31, Richard Achatz <info@richardachatz.de> a écrit :
Hi ghandi,

I dont understand why this is dangerous. Can you explain it for me?

Richard

Am 12. Oktober 2018 19:03:15 MESZ schrieb GHANDI Othmane <othmane.ghandi@gmail.com>:
Hi all

When you put an URL like this : server_name/website/lang/fr_FR?r=http://www.youtube.com => it will redirect you to youtube or whatever link you put after ?r=

How we can overcome this ?

Thanks a lot


Othmane Ghandi
----------------------------------------------------------------------------------------------------------------------------------------------
''Where others see limitations, we see possibilities''
"les bonnes choses viennent à ceux qui savent attendre. Les grandes choses viennent à ceux qui se lèvent et qui font tout pour y arriver"
-----------------------------------------------------------------------------------------------------------------------------------------------
          http://www.viadeo.com/profile/0021ck3b96kz2yq4                                          
: othmane.ghandi
: +212 6 00 45 96 84

_______________________________________________
Mailing-List: https://www.odoo.com/groups/technical-62
Post to: mailto:technical@mail.odoo.com
Unsubscribe: https://www.odoo.com/groups?unsubscribe


--
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.

Referentie