Skip to content

Commit

Permalink
Update aspnetcore-10.0.md (#34769)
Browse files Browse the repository at this point in the history
* Update aspnetcore-10.0.md

* Update aspnetcore/release-notes/aspnetcore-10.0.md
  • Loading branch information
Rick-Anderson authored Feb 20, 2025
1 parent e99e04d commit 282acb1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion aspnetcore/release-notes/aspnetcore-10.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ Use the new [`RedirectHttpResult.IsLocalUrl(url)`](https://source.dot.net/#Micro
- It doesn't have the [host](https://developer.mozilla.org/docs/Web/API/URL/host) or [authority](https://developer.mozilla.org/docs/Web/URI/Authority) section.
- It has an [absolute path](https://developer.mozilla.org/docs/Learn_web_development/Howto/Web_mechanics/What_is_a_URL#absolute_urls_vs._relative_urls).

URLs using [virtual paths](/previous-versions/aspnet/ms178116(v=vs.100)) '~/' are also local.
URLs using [virtual paths](/previous-versions/aspnet/ms178116(v=vs.100)) `"~/"` are also local.

`IsLocalUrl` is useful for validating URLs before redirecting to them to prevent [open redirection attacks](https://brightsec.com/blog/open-redirect-vulnerabilities/).

Expand Down

0 comments on commit 282acb1

Please sign in to comment.