Fixed: Limit redirects after login to local paths

(cherry picked from commit 14005d8d1054eafaba808337a109d5812f3e79e6)
This commit is contained in:
Mark McDowall
2024-08-20 14:46:36 -07:00
committed by retrodadson
parent ce315afb2a
commit 5858c2dda6
@@ -72,7 +72,7 @@ namespace Prowlarr.Http.Authentication
return Unauthorized();
}
if (returnUrl.IsNullOrWhiteSpace())
if (returnUrl.IsNullOrWhiteSpace() || !Url.IsLocalUrl(returnUrl))
{
return Redirect(_configFileProvider.UrlBase + "/");
}