PHP Credential Leak: When a Redirect Crosses the Trust Boundary

Overview PHP has patched a security vulnerability that could cause sensitive credentials to be forwarded to an unintended server when an application follows an HTTP […]