Answer the question
In order to leave comments, you need to log in
Are hash parameters passed to nested links in the url?
I have the following link, which has the next parameter
https://ac541fd81e537666c047920d00e60013.web-security-academy.net/oauth-callback/../post?next=https%3A%2F%2Fexploit-ac571fcc1e2f765bc0d9920e018d0054.web-security-academy.net%2Fexploit#access_token=yjodXOF6vqIg-9fbhSyynloq---95PIDXswoRrImuOG&expires_in=3600&token_type=Bearer&scope=openid%20profile%20email
Answer the question
In order to leave comments, you need to log in
See.
If the hash is encoded in URLEncode, it will be passed.
If it is separate, clean, not encoded, it will remain on the last page.
That is:
http://example.org/login?next=profile#asdfg
Only on login and that's it.
http://example.org/login?next=profile%23asdfg
Only on profile and that's it.
http://example.org/login?next=profile%23asdfg#asdfg
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question