snipe 356a0d4c12 Fixed RB-20978 - Header may not contain more than a single header, new line detected ...

When edit() is called, it stores url()->previous() (the Referer header) as url.intended. When update() is called after, getRedirectOption() pulls that URL out of the session and uses it as a Location header. If that URL ever contains a \n or \r\n - whether from a crafted Referer header, a stale SAML RelayState, or a proxy quirk - PHP's header() function raises this exception as a header injection safeguard.

2026-06-03 20:38:50 +01:00

..

ForgotPasswordController.php

Apply pint to non-API controllers

2026-03-13 16:45:30 +00:00

LoginController.php

Add new unique constraint and improved nonce-checking logic

2026-05-05 15:23:07 +01:00

RegisterController.php

Adopt Laravel coding style

2021-06-10 20:15:52 +00:00

ResetPasswordController.php

Apply pint to non-API controllers

2026-03-13 16:45:30 +00:00

SamlController.php

Fixed RB-20978 - Header may not contain more than a single header, new line detected

2026-06-03 20:38:50 +01:00