parent
369bd82a84
commit
3ee16422f7
@ -8,11 +8,11 @@ export async function getServerSideProps ({ req, res, query: { callbackUrl, erro
|
|||||||
const session = await getSession({ req })
|
const session = await getSession({ req })
|
||||||
|
|
||||||
// assume external by default so we will use fallback callback
|
// assume external by default so we will use fallback callback
|
||||||
let external = true;
|
let external = true
|
||||||
try {
|
try {
|
||||||
external = isExternal(decodeURIComponent(callbackUrl))
|
external = isExternal(decodeURIComponent(callbackUrl))
|
||||||
} catch (err) {
|
} catch (err) {
|
||||||
console.error("error decoding callback:", callbackUrl, err)
|
console.error('error decoding callback:', callbackUrl, err)
|
||||||
}
|
}
|
||||||
if (external) {
|
if (external) {
|
||||||
// This is a hotfix for open redirects. See https://github.com/stackernews/stacker.news/issues/264
|
// This is a hotfix for open redirects. See https://github.com/stackernews/stacker.news/issues/264
|
||||||
|
@ -8,11 +8,11 @@ export async function getServerSideProps ({ req, res, query: { callbackUrl, erro
|
|||||||
const session = await getSession({ req })
|
const session = await getSession({ req })
|
||||||
|
|
||||||
// assume external by default so we will use fallback callback
|
// assume external by default so we will use fallback callback
|
||||||
let external = true;
|
let external = true
|
||||||
try {
|
try {
|
||||||
external = isExternal(decodeURIComponent(callbackUrl))
|
external = isExternal(decodeURIComponent(callbackUrl))
|
||||||
} catch (err) {
|
} catch (err) {
|
||||||
console.error("error decoding callback:", callbackUrl, err)
|
console.error('error decoding callback:', callbackUrl, err)
|
||||||
}
|
}
|
||||||
if (external) {
|
if (external) {
|
||||||
// This is a hotfix for open redirects. See https://github.com/stackernews/stacker.news/issues/264
|
// This is a hotfix for open redirects. See https://github.com/stackernews/stacker.news/issues/264
|
||||||
|
Loading…
x
Reference in New Issue
Block a user