3 ms·

Also makes it really easy to forward a user to a nytimes phishing site. e.g. "Hey - did you see the new wordle? https://www.powerlanguage.co.uk/wordle/?url=ht

Also makes it really easy to forward a user to a nytimes phishing site. e.g. "Hey - did you see the new wordle? https://www.powerlanguage.co.uk/wordle/?url=https://www.example.com/phishNYT https://www.powerlanguage.co.uk/wordle/?url=https://www.exam... "

g_p 5y ago
Seems like hopefully an easy and obvious fix - no need for a fully open redirect here!