Skip to content
Permalink
Browse files Browse the repository at this point in the history
[fix] sns/login: close open redirect (#2061)
  • Loading branch information
tany committed Apr 11, 2018
1 parent 543f581 commit 6016948
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion app/controllers/concerns/sns/login_filter.rb
Expand Up @@ -22,7 +22,7 @@ def default_logged_in_path
def login_success
if params[:ref].blank?
redirect_to default_logged_in_path
elsif params[:ref] =~ /^\//
elsif params[:ref] =~ /^\/[^\/]/
redirect_to params[:ref]
else
render "sns/login/redirect"
Expand Down

0 comments on commit 6016948

Please sign in to comment.