Merge pull request #927 from uc-cdis/fix/redirect

(PXP-8286): fix(google): add redirect validation to /link/google

fence/blueprints/link.py

@@ -7,6 +7,7 @@
 from cdislogging import get_logger
 
 from cirrus import GoogleCloudManager
+from fence.blueprints.login.redirect import validate_redirect
 from fence.restful import RestfulApi
 from fence.errors import NotFound
 from fence.errors import Unauthorized
@@ -101,6 +102,9 @@ def delete(self):
     def _link_google_account():
         provided_redirect = flask.request.args.get("redirect")
 
+        # will raise UserError if invalid
+        validate_redirect(provided_redirect)
+
         if not provided_redirect:
             raise UserError({"error": "No redirect provided."})