mirror/fosrl.pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2025-08-30 22:49:27 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

verify redirects are safe before redirecting

Browse source
This commit is contained in:
Milo Schwartz 2025-01-09 23:21:57 -05:00
parent a556339b76
commit 6c813186b8
No known key found for this signature in database
18 changed files with 99 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/app/auth/verify-email/VerifyEmailForm.tsx
View file

@ -36,6 +36,7 @@ import { useRouter } from "next/navigation";
import { formatAxiosError } from "@app/lib/api";;
import { createApiClient } from "@app/lib/api";
import { useEnvContext } from "@app/hooks/useEnvContext";
import { cleanRedirect } from "@app/lib/cleanRedirect";
const FormSchema = z.object({
email: z.string().email({ message: "Invalid email address" }),
@ -91,11 +92,9 @@ export default function VerifyEmailForm({
"Email successfully verified! Redirecting you..."
);
setTimeout(() => {
if (redirect && redirect.includes("http")) {
window.location.href = redirect;
}
if (redirect) {
router.push(redirect);
const safe = cleanRedirect(redirect);
router.push(safe);
} else {
router.push("/");
}