mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2025-11-08 01:55:43 +00:00
feat: sanitize redirect URL on check
This commit is contained in:
@@ -29,7 +29,7 @@ export const ContinuePage = () => {
|
|||||||
return <Navigate to="/logout" />;
|
return <Navigate to="/logout" />;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!isValidUrl(redirectURI)) {
|
if (!isValidUrl(DOMPurify.sanitize(redirectURI))) {
|
||||||
return <Navigate to="/logout" />;
|
return <Navigate to="/logout" />;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user