Security: Fixes for CVE-2025-6197 and CVE-2025-6023 (#108330)

apply security patch: main/439-202506251632.patch (cherry picked from commit 7f3977c54548dc82d9b2c44c125b30b3dbc2069a) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-07-18 09:06:26 -06:00
parent aa0f8caa35
commit 4669b586e9
5 changed files with 138 additions and 0 deletions
@@ -147,6 +147,7 @@ func requestContextMiddleware() web.Middleware {
 				c.RequestNonce = ctx.RequestNonce
 				c.PerfmonTimer = ctx.PerfmonTimer
 				c.LookupTokenErr = ctx.LookupTokenErr
+				c.UseSessionStorageRedirect = ctx.UseSessionStorageRedirect
 			}

 			next.ServeHTTP(w, r)