10.4. Risks Associated with request_uri

10.4. Risks Associated with request_uri

The introduction of request_uri introduces several attack possibilities. Consult the security considerations in Section 7 of [RFC3986] for more information regarding risks associated with URIs.

See 10.4.1. DDoS Attack on the Authorization Server and 10.4.2. Request URI Rewrite.