mirror of
https://github.com/github/codeql.git
synced 2026-06-15 18:01:10 +02:00
Handlers for non-GET requests aren't vulnerable to URL redirect attacks, because browsers won't initiate non-GET requests when you click a link. We can use Rails routing information, if present, to filter out any handlers for non-GET requests.