Big Redirect Detected (Potential Sensitive Information Leak)

This means that the server responds with a redirect which seems to provide a response larger than it is expected to be. This may indicate that although the server sent a redirect in a response it also attached a body content to it. The danger is that the body content may include sensitive information, personal data, etc. leaving the possibility of further attacks.

Redirects should have very small or no content at all.

Verify that your redirects do not leak any sensitive information.

ScanRepeat analyzes every HTTP response and for each redirect found, it checks if the size of its body content is larger than expected. It reports every occurrence of such a vulnerability providing its URL and response body length.