diff --git a/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html b/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html
index de31356..5ac014b 100644
--- a/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html
+++ b/charts/jitsi-keycloak-adapter/files/web/oidc/oidc-adapter.html
@@ -35,6 +35,8 @@
         const search = qs.get("search") || "";
         const hash = qs.get("hash") || "";
 
+        if (!path.match("^/")) throw new Error("invalid path");
+
         let target = `${path}?` +
           `${search}${search ? "&" : ""}` +
           `oidc=unauthorized` +
diff --git a/templates/usr/share/jitsi-meet/static/oidc-adapter.html b/templates/usr/share/jitsi-meet/static/oidc-adapter.html
index de31356..5ac014b 100644
--- a/templates/usr/share/jitsi-meet/static/oidc-adapter.html
+++ b/templates/usr/share/jitsi-meet/static/oidc-adapter.html
@@ -35,6 +35,8 @@
         const search = qs.get("search") || "";
         const hash = qs.get("hash") || "";
 
+        if (!path.match("^/")) throw new Error("invalid path");
+
         let target = `${path}?` +
           `${search}${search ? "&" : ""}` +
           `oidc=unauthorized` +