Validate state param while redirecting
This commit is contained in:
parent
613a342115
commit
f957a1e435
@ -476,7 +476,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) {
|
||||
}
|
||||
|
||||
redirect := req.Form.Get("state")
|
||||
if redirect == "" {
|
||||
if !strings.HasPrefix(redirect, "/") {
|
||||
redirect = "/"
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user