Merge branch 'master' into feat/idp_email

uc-cdis · Jun 15, 2021 · d22816d · d22816d
2 parents 90ee044 + ddd7ecd
commit d22816d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/fence/blueprints/link.py b/fence/blueprints/link.py
@@ -7,6 +7,7 @@
 from cdislogging import get_logger
 
 from cirrus import GoogleCloudManager
+from fence.blueprints.login.redirect import validate_redirect
 from fence.restful import RestfulApi
 from fence.errors import NotFound
 from fence.errors import Unauthorized
@@ -101,6 +102,9 @@ def delete(self):
     def _link_google_account():
         provided_redirect = flask.request.args.get("redirect")
 
+        # will raise UserError if invalid
+        validate_redirect(provided_redirect)
+
         if not provided_redirect:
             raise UserError({"error": "No redirect provided."})