Skip to content
vetkitChecksChangelogDocumentation

vetkit.kotlin.open-redirect.request-redirect

A redirect target is built from request data (open redirect).

Last updated:

Suite: Security

kotlin

A redirect target is built from request data (open redirect).

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Redirect to fixed paths or validate the target against an allow-list.

References

Source: packages/engine/rules/sast/kotlin.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.