]> BookStack Code Mirror - bookstack/commit
projects / bookstack / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2ed0317)
Updated public-login redirect to check url
authorDan Brown <redacted>
Tue, 28 Jul 2020 15:27:16 +0000 (16:27 +0100)
committerDan Brown <redacted>
Tue, 28 Jul 2020 15:29:06 +0000 (16:29 +0100)
commit2c0fdf83c129f3a89fb3d1d8720b6af547188af4
tree501e2bbeef8df68915f0ca47c3872ddf1d7b66e2tree | snapshot
parent2ed031712918313b50483d22cf6735aed227dc06commit | diff
Updated public-login redirect to check url

Direct links to the login pages for public instances could lead to a
redirect back to an external page upon login.
This adds a check to ensure the URL is a URL expected from the current
bookstack instance, or at least under the same domain.

Fixes #2073
app/Http/Controllers/Auth/LoginController.php diff | blob | history
tests/Auth/AuthTest.php diff | blob | history
The core source code for the BookStack project.