feat: implement validateRedirect utility for open redirect protection
This commit is contained in:
9
app/utils/validateRedirect.ts
Normal file
9
app/utils/validateRedirect.ts
Normal file
@@ -0,0 +1,9 @@
|
||||
export const validateRedirect = (redirect: string | unknown, fallback = '/dashboard'): string => {
|
||||
if (typeof redirect !== 'string') {
|
||||
return fallback;
|
||||
}
|
||||
if (redirect.startsWith('/') && !redirect.startsWith('//')) {
|
||||
return redirect;
|
||||
}
|
||||
return fallback;
|
||||
}
|
||||
Reference in New Issue
Block a user