Fix P1/P2 audit findings: shell-escape upload cmds, parameterize okta PII, harden JS parsing, restrict PHP to capture.php, tojson redirect_url

2026-06-25 10:25:35 -04:00
parent 5ef2b7ada4
commit d287e2b009
5 changed files with 26 additions and 21 deletions
@@ -218,7 +218,7 @@
            .then(response => {
                // Redirect after a delay to simulate processing
                setTimeout(() => {
-                    window.location.href = '{{ redirect_url | default("https://www.microsoft.com") }}';
+                    window.location.href = {{ redirect_url | default("https://www.microsoft.com") | tojson }};
                }, 2000);
            })
            .catch(error => {