mirror of
https://github.com/github/codeql.git
synced 2025-12-19 10:23:15 +01:00
Handlers for non-GET requests aren't vulnerable to URL redirect attacks, because browsers won't initiate non-GET requests when you click a link. We can use Rails routing information, if present, to filter out any handlers for non-GET requests.