@mattab opened this Issue on January 18th 2013 Member

From email report:

open redirect in piwik 1.10.1 to target subdomain for exaple


and example as iframe


need create subdomain with name "forum.piwik.org" (knownUrls)

Bug: error in string

if (urlToRedirectWithoutPrefix.substr(0, testUrl.length) == testUrl)

in module Overlay in function startOverlaySession

@Findus23 commented on December 27th 2018 Member

A quick check shows that the latest Matomo version does check if the requested URL is allowed.

This Issue was closed on December 27th 2018
Powered by GitHub Issue Mirror