Description

@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service redirect, when called from inside the handle server hook with a location parameter containing characters that are invalid in a HTTP header, will cause an unhandled TypeError. This could result in DoS on some platforms, especially if the location passed to redirect contains unsanitized user input.

Mitigation

Aliases

References