1299c94a52
Previously external domains were allowed in the client-side redirects, but not the server-side redirects. Now the behavior is to only allow local origins. |
||
---|---|---|
.. | ||
omniauth_callbacks_controller.rb |