From 934d09377599c84bf4fd4381cdcfed1b7301867c Mon Sep 17 00:00:00 2001 From: Eldad Fux Date: Fri, 24 Jan 2020 22:33:10 +0200 Subject: [PATCH] Updated docs --- docs/references/account/create-session.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/references/account/create-session.md b/docs/references/account/create-session.md index e3e221ad7d..d41f1d858c 100644 --- a/docs/references/account/create-session.md +++ b/docs/references/account/create-session.md @@ -1,4 +1,4 @@ -Allow the user to login into his account by providing a valid email and password combination. Use the success and failure arguments to provide a redirect URL\'s back to your app when login is completed. +Allow the user to login into his account by providing a valid email and password combination. Use the success and failure arguments to provide a redirect URL's back to your app when login is completed. Please note that in order to avoid a [Redirect Attack](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md) the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface.