fix: throw an error in not a valid path

nordeck · Oct 12, 2024 · 61a7817 · 61a7817
1 parent 261a886
commit 61a7817
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html b/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html
@@ -35,6 +35,8 @@
         const search = qs.get("search") || "";
         const hash = qs.get("hash") || "";
 
+        if (!path.match("^/")) throw new Error("invalid path");
+
         let target = `${path}?` +
           `${search}${search ? "&" : ""}` +
           `oidc=unauthorized` +

diff --git a/templates/usr/share/jitsi-meet/static/oidc-adapter.html b/templates/usr/share/jitsi-meet/static/oidc-adapter.html
@@ -35,6 +35,8 @@
         const search = qs.get("search") || "";
         const hash = qs.get("hash") || "";
 
+        if (!path.match("^/")) throw new Error("invalid path");
+
         let target = `${path}?` +
           `${search}${search ? "&" : ""}` +
           `oidc=unauthorized` +