Open Redirect fix, thanks Max Boll

WWBN · Mar 14, 2022 · 77e9aa6 · 77e9aa6
1 parent 24a25e4
commit 77e9aa6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/objects/login.json.php b/objects/login.json.php
@@ -30,7 +30,7 @@
 Category::clearCacheCount();
 TimeLogEnd($timeLog, __LINE__);
 
-if (!preg_match("|^" . $global['webSiteRootURL'] . "|", $_POST['redirectUri'])) {
+if(!isSameDomain($global['webSiteRootURL'], $_POST['redirectUri'])){
     $_POST['redirectUri'] = $global['webSiteRootURL'];
 }
 _error_log("Start Login Request redirectUri=" . $_POST['redirectUri']);