Incorrect handling of certain characters passed to the redirection functionality in Rails can lead to a single-click XSS vulnerability.

Posted on July 29, 2023by bugbounty

Ruby on Rails disclosed a bug submitted by meowday: https://hackerone.com/reports/1955370