Advisories for Gem/Google_sign_in package

It is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin.