From 8e09eec47dce5ba1d1b5904e707471e9bc51c692 Mon Sep 17 00:00:00 2001
From: Hoang Nguyen <50922013+catmandx@users.noreply.github.com>
Date: Thu, 22 Jun 2023 23:40:24 +0700
Subject: [PATCH] Prevent XSS and Open Redirect in login page.

---
 templates/login.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/login.html b/templates/login.html
index bc5ace4..f42d459 100644
--- a/templates/login.html
+++ b/templates/login.html
@@ -83,8 +83,8 @@
 <script>
     function redirectNext() {
         const urlParams = new URLSearchParams(window.location.search);
-        const nextURL = urlParams.get('next');
-        if (nextURL) {
+        const nextURL = urlParams.get('next').trim();
+        if (nextURL && /(?:^\/[a-zA-Z_])|(?:^\/$)/.test(nextURL)) {
             window.location.href = nextURL;
         } else {
             window.location.href = '/{{.basePath}}';