Merge pull request #194 from r4um/validate-state
Validate state param while redirecting.
This commit is contained in:
		
						commit
						d5a332c3f2
					
				|  | @ -476,7 +476,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) { | ||||||
| 	} | 	} | ||||||
| 
 | 
 | ||||||
| 	redirect := req.Form.Get("state") | 	redirect := req.Form.Get("state") | ||||||
| 	if redirect == "" { | 	if !strings.HasPrefix(redirect, "/") { | ||||||
| 		redirect = "/" | 		redirect = "/" | ||||||
| 	} | 	} | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
		Loading…
	
		Reference in New Issue