Comment

Comment by toni

The links on the top bar of an individual article page are in the form of http://tcfast.com/?backTo=/2011/07/14/larry-page-earnings-ca...

But "backTo" parameter also accepts full URLs, so something like http://tcfast.com/?backTo=http://cnn.com/&t=g will happily redirect to CNN.

This might not be desirable for you, because in effect it will transform your site to a free redirect service ready for use by spammers.

You should check the value of "backTo" parameter and redirect only inside your own site.

parent toni 15 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton