remove cross-site-scripting

ohcnetwork · Oct 27, 2023 · 3e30c02 · 3e30c02
1 parent e422a39
commit 3e30c02
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/Components/Auth/Login.tsx b/src/Components/Auth/Login.tsx
@@ -117,7 +117,8 @@ export const Login = (props: { forgot?: boolean }) => {
               redirectParam &&
               new URL(redirectParam).origin === window.location.origin
             )
-              window.location.href = redirectParam;
+              window.location.href =
+                window.location.origin + new URL(redirectParam).pathname;
             else window.location.href = "/facility";
           } catch {
             window.location.href = "/facility";