GitLab | Report #1923672 - Account takeover due to insufficient URL validation on RelayState parameter | HackerOne

https://hackerone.com/reports/1923672