Glossary: Web App Security and Authentication

Open redirect

Also written: open redirects

A page that sends people to any address in a request, like ?next=, lending your domain's trust to a look-alike site. Accept only paths on your own site.