AuthEndpoint.FragmentFix

Does the server attach a fragment

This test checks whether the server attaches an arbitrary fragment identifier to prevent browsers from reattaching fragments to redirection URLs.

View source code on GitHub

Documents

This test is part of the following document(s):

• OAuth 2.0 Security Best Current Practice (draft 25) (SecBCP), section 4.1.3 (may)

Back to the test case overview or the threat overview