0

I have an openredirect vulnerability on my web application. You can learn about this with the following link: https://stackoverflow.com/questions/48340714/azure-ad-b2c-vulnerable-to-open-redirect

Because it is a problem with a Microsoft product, it is not possible to fix this.

So I'm wondering if it is possible with IIS, to filter a GET parameter for a specific URL.

I just want to authorize one URL in the post_logout_redirect_uri GET parameters.

Improve this question
2
  • What language are you using backend? – yeah_well Jul 26 '19 at 16:21
  • Server Fault is probably a better site for this. I'm not sure if it's off-topic here, but if you don't get answers over the next few days, you should delete this question and post it there. – Fund Monica's Lawsuit Jul 26 '19 at 19:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.