Other encoding schemes may be susceptible to request smuggling attacks. Fixed multi-byte schemes in particular (e.g. Encoding.Unicode, Encoding.UTF32) should never be used as their binary ...
I am trying to federate login to an upstream OIDC OP (GovUK One Login) that requires a nonce in the /authorize call but there is no nonce included in the call nor is there an option to include one.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback