Remove duplicated logic
This commit is contained in:
parent
e082a8d059
commit
dd1b97acd5
@ -439,20 +439,13 @@ func (p *OAuthProxy) IsValidRedirect(redirect string) bool {
|
||||
switch {
|
||||
case strings.HasPrefix(redirect, "/") && !strings.HasPrefix(redirect, "//"):
|
||||
return true
|
||||
case strings.HasPrefix(redirect, "http://"):
|
||||
redirect = strings.TrimPrefix(redirect, "http://")
|
||||
redirect = strings.Split(redirect, "/")[0]
|
||||
for _, domain := range p.whitelistDomains {
|
||||
if strings.HasSuffix(redirect, domain) {
|
||||
return true
|
||||
}
|
||||
}
|
||||
case strings.HasPrefix(redirect, "http://") || strings.HasPrefix(redirect, "https://"):
|
||||
url, err := url.Parse(redirect)
|
||||
if err != nil {
|
||||
return false
|
||||
case strings.HasPrefix(redirect, "https://"):
|
||||
redirect = strings.TrimPrefix(redirect, "https://")
|
||||
redirect = strings.Split(redirect, "/")[0]
|
||||
}
|
||||
for _, domain := range p.whitelistDomains {
|
||||
if strings.HasSuffix(redirect, domain) {
|
||||
if (url.Host == domain) || (strings.HasPrefix(domain, ".") && strings.HasSuffix(url.Host, domain)) {
|
||||
return true
|
||||
}
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user