Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

An Open Redirect Guard That Rebuilt What It Rejected

Code: Megapixel99/CAS-Authentication-User Eight days ago I wrote that npm audit had never seen the worst bug in my own package.

  • Two open redirects discovered in CAS-Authentication-User npm package
  • Fix in version 0.4.0 improved security using WHATWG URL API
  • Vulnerability resolved by validating user input and rejecting malicious paths

Why ExitOnForwardFailure=yes does not prove your database is reachable

An SSH tunnel can be listening on your laptop while the service behind it is unavailable. ExitOnForwardFailure=yes is useful, but it does not turn the SSH process into a database health check.

  • SSH tunnel active doesn't guarantee database reachability
  • ExitOnForwardFailure=yes doesn't check database connection
  • Separate issues: SSH tunnel vs destination database reachability

More from Thursday 17 September →