Yuki Takei 3 лет назад
Родитель
Сommit
d05dd26623
1 измененных файлов с 8 добавлено и 2 удалено
  1. 8 2
      packages/app/src/server/middlewares/safe-redirect.js

+ 8 - 2
packages/app/src/server/middlewares/safe-redirect.js

@@ -18,8 +18,14 @@ function isInWhitelist(whitelistOfHosts, redirectToFqdn) {
     return false;
   }
 
-  const redirectUrl = new URL(redirectToFqdn);
-  return whitelistOfHosts.includes(redirectUrl.hostname) || whitelistOfHosts.includes(redirectUrl.host);
+  try {
+    const redirectUrl = new URL(redirectToFqdn);
+    return whitelistOfHosts.includes(redirectUrl.hostname) || whitelistOfHosts.includes(redirectUrl.host);
+  }
+  catch (err) {
+    logger.warn(err);
+    return false;
+  }
 }