From 5da1c2fd4cfff3e1448db67b2555c06c3c940582 Mon Sep 17 00:00:00 2001 From: Korolev Dmitry Date: Thu, 11 Dec 2025 11:34:58 +0100 Subject: [PATCH] code ql sm04598 (#2723) Co-authored-by: Mark Wallace <127216156+markwallace-microsoft@users.noreply.github.com> --- dotnet/src/Microsoft.Agents.AI.DevUI/DevUIMiddleware.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dotnet/src/Microsoft.Agents.AI.DevUI/DevUIMiddleware.cs b/dotnet/src/Microsoft.Agents.AI.DevUI/DevUIMiddleware.cs index 2d6fcbd7e4..ac585ad39a 100644 --- a/dotnet/src/Microsoft.Agents.AI.DevUI/DevUIMiddleware.cs +++ b/dotnet/src/Microsoft.Agents.AI.DevUI/DevUIMiddleware.cs @@ -81,7 +81,7 @@ internal sealed partial class DevUIMiddleware } context.Response.StatusCode = StatusCodes.Status301MovedPermanently; - context.Response.Headers.Location = redirectUrl; + context.Response.Headers.Location = redirectUrl; // CodeQL [SM04598] justification: The redirect URL is constructed from a server-configured base path (_basePath), not user input. The query string is only appended as parameters and cannot change the redirect destination since this is a relative URL. if (this._logger.IsEnabled(LogLevel.Debug)) {