diff --git a/app/server/routes.js b/app/server/routes.js
index 5326ae72..cc75e1fc 100644
--- a/app/server/routes.js
+++ b/app/server/routes.js
@@ -10,11 +10,15 @@ const { parseBool } = require('./util');
const config = require('./config');
exports.reauth = function reauth(req, res) {
- const r = req.headers.referer || '/';
+ let { referer } = req.headers;
+ console.log(`referer: ${referer}`);
+ if (!validator.isURL(referer, { host_whitelist: ['localhost'] })) referer = '/';
+ console.log(`referer: ${referer}`);
+
res
.status(401)
.send(
- ``
+ ``
);
};