public_git/oauth2-proxy
1
0
Fork 0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2026-10-10 00:15:39 +02:00
Code Issues Projects Releases Wiki Activity

Don't log invalid redirect if redirect is empty

Browse Source
This commit is contained in:
Joel Speed
2020-06-19 18:17:05 +01:00
parent 713c3927a9
commit dc756b9de3
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
oauthproxy.go
+3
View File
@@ -598,6 +598,9 @@ func validOptionalPort(port string) bool {
// IsValidRedirect checks whether the redirect URL is whitelisted
func (p *OAuthProxy) IsValidRedirect(redirect string) bool {
switch {
case redirect == "":
// The user didn't specify a redirect, should fallback to `/`
return false
case strings.HasPrefix(redirect, "/") && !strings.HasPrefix(redirect, "//") && !invalidRedirectRegex.MatchString(redirect):
return true
case strings.HasPrefix(redirect, "http://") || strings.HasPrefix(redirect, "https://"):