Advisories for Gem/Google_sign_in package

It is possible to redirect a user to another origin if the "proceed_to" value in the session store is set to a protocol-relative URL.

It is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin.