topic Potential cross site redirection issue? in QlikView https://community.qlik.com/t5/QlikView/Potential-cross-site-redirection-issue/m-p/274327#M1278785 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I'm new to QlikView and have just setup a server instance. I'm using NTLM authentication with Authentication set to "Always" and the login address set to "Alternate Login Page (web form)".</P><P></P><P>I notice that if I supply users with a crafted URL, e.g. <EM><A class="jive-link-external-small" href="http://xxx.yyy.zzz/qlikview/logout.htm?login=http://www.google.com" target="_blank">http://xxx.yyy.zzz/qlikview/logout.htm?login=http://www.google.com</A></EM> the login link on the subsequent page gets redirected to <A href="http://www.google.com" target="_blank">www.google.com</A>.</P><P></P><P>Is there any way to circumvent this as it's being flagged as a security risk.</P><P></P><P>Many thanks.</P></BODY></HTML> Mon, 26 Jan 2026 18:19:17 GMT 2026-01-26T18:19:17Z Potential cross site redirection issue? https://community.qlik.com/t5/QlikView/Potential-cross-site-redirection-issue/m-p/274327#M1278785 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I'm new to QlikView and have just setup a server instance. I'm using NTLM authentication with Authentication set to "Always" and the login address set to "Alternate Login Page (web form)".</P><P></P><P>I notice that if I supply users with a crafted URL, e.g. <EM><A class="jive-link-external-small" href="http://xxx.yyy.zzz/qlikview/logout.htm?login=http://www.google.com" target="_blank">http://xxx.yyy.zzz/qlikview/logout.htm?login=http://www.google.com</A></EM> the login link on the subsequent page gets redirected to <A href="http://www.google.com" target="_blank">www.google.com</A>.</P><P></P><P>Is there any way to circumvent this as it's being flagged as a security risk.</P><P></P><P>Many thanks.</P></BODY></HTML> Mon, 26 Jan 2026 18:19:17 GMT https://community.qlik.com/t5/QlikView/Potential-cross-site-redirection-issue/m-p/274327#M1278785 2026-01-26T18:19:17Z