fix (backend): check redirect url

atsu1125 · Mar 30, 2024 · 6583225 · 6583225
1 parent 8c8b906
commit 6583225
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/packages/backend/src/misc/fetch.ts b/packages/backend/src/misc/fetch.ts
@@ -67,17 +67,16 @@ export async function getResponse(args: {
 	});
 
 	if (args.redirect === 'manual' && [301, 302, 307, 308].includes(res.status)) {
+		if (!isValidUrl(res.url)) {
+			throw new StatusError('Invalid URL', 400);
+		}
 		return res;
 	}
 
 	if (!res.ok) {
 		throw new StatusError(`${res.status} ${res.statusText}`, res.status, res.statusText);
 	}
 
-	if (res.redirected && !isValidUrl(res.url)) {
-		throw new StatusError('Invalid URL', 400);
-	}
-
 	return res;
 }