Prevent redirecting to an absolute URL after login

nextcloud / user_oidc

OIDC connect user backend for Nextcloud

GNU Affero General Public License v3.0

89 stars 36 forks source link

Prevent redirecting to an absolute URL after login #950

Closed julien-nc closed 2 months ago

julien-nc commented 2 months ago

Remove protocol from the redirect URL passed in /apps/user_oidc/login/2?redirectUrl=URL so it is treated as a path relative to the domain of the NC instance.