Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am checking about the security of redirect link, For the below link , how to determine whether it is secure?

For the first link, the users are not allowed to change the url in the browser, but they can copy the url down, open a new tab and paste it and change the value (but it is useless for attacking?)

For the second, it is a return path and the users can change it to any other value

Example redirect link 1

Example redirect link 2

share|improve this question
Can you explain what you mean by secure? In general terms, it doesn't matter how you get input into your application, it just matters that you don't ever trust it. – Graham Hill Apr 16 '12 at 13:12

You didn't explain what you mean by secure, so it is hard to answer your question. Please see the FAQ for advice on how to ask questions.

But that said, here are some resources on general risks with open, unrestricted redirects:

These may help understand the potential security risks associated with open redirects.

Please understand that there is debate about whether open redirects are a serious problem worth worrying about or not. Many people would say that they pose little risk to the site that hosts the open redirect and aren't worth too much energy to fuss over.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.