mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2026-07-14 22:11:13 +00:00
fix: fix domain check in acl service
This commit is contained in:
@@ -350,7 +350,10 @@ func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
|
||||
return false
|
||||
}
|
||||
|
||||
if strings.EqualFold(u.Hostname(), au.Hostname()) {
|
||||
nu := strings.TrimSuffix(u.Hostname(), ".")
|
||||
nau := strings.TrimSuffix(au.Hostname(), ".")
|
||||
|
||||
if strings.EqualFold(nu, nau) {
|
||||
return true
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user