From 383751327006b2d2d8d61d08f882cd6ac0587149 Mon Sep 17 00:00:00 2001 From: Pierre-Olivier Mercier Date: Sun, 1 Mar 2020 18:21:04 +0100 Subject: [PATCH] token-validator: don't prepend prefix when redirection are outside the site --- token-validator/main.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/token-validator/main.go b/token-validator/main.go index b846184..4f8093e 100644 --- a/token-validator/main.go +++ b/token-validator/main.go @@ -27,7 +27,7 @@ func (r ResponseWriterPrefix) Header() http.Header { } func (r ResponseWriterPrefix) WriteHeader(s int) { - if v, exists := r.real.Header()["Location"]; exists { + if v, exists := r.real.Header()["Location"]; exists && len(v) > 0 && !strings.HasPrefix(v[0], "https://") && !strings.HasPrefix(v[0], "http://") { r.real.Header().Set("Location", r.prefix+v[0]) } r.real.WriteHeader(s)