Validate state param while redirecting
This commit is contained in:
parent
613a342115
commit
f957a1e435
@ -476,7 +476,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
redirect := req.Form.Get("state")
|
redirect := req.Form.Get("state")
|
||||||
if redirect == "" {
|
if !strings.HasPrefix(redirect, "/") {
|
||||||
redirect = "/"
|
redirect = "/"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user