steve
/
sunrise-cms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

attempt to fix codeql vulnerability

deepsource-autofix-76c6eb20
Dan Gowans 2022-08-22 15:49:08 -04:00
parent 2b6ef96851
commit 4090714ace
2 changed files with 27 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
routes/login.js
View File

@ -4,17 +4,19 @@ import * as authenticationFunctions from "../helpers/functions.authentication.js
export const router = Router();
const getSafeRedirectURL = (possibleRedirectURL = "") => {
const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix");
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase();
switch (urlToCheck) {
case "/admin/fees":
case "/lotOccupancies":
case "/lots":
case "/maps":
case "/workOrders":
case "/reports":
return urlPrefix + urlToCheck;
if (typeof (possibleRedirectURL) === "string") {
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase();
switch (urlToCheck) {
case "/admin/fees":
case "/lotOccupancies":
case "/lots":
case "/maps":
case "/workOrders":
case "/reports":
return urlPrefix + urlToCheck;
}
}
return urlPrefix + "/dashboard";
};

25
routes/login.ts
View File

@ -15,19 +15,22 @@ const getSafeRedirectURL = (possibleRedirectURL = "") => {
const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix");
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase();
if (typeof (possibleRedirectURL) === "string") {
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase();
switch (urlToCheck) {
case "/admin/fees":
case "/lotOccupancies":
case "/lots":
case "/maps":
case "/workOrders":
case "/reports":
switch (urlToCheck) {
case "/admin/fees":
case "/lotOccupancies":
case "/lots":
case "/maps":
case "/workOrders":
case "/reports":
return urlPrefix + urlToCheck;
return urlPrefix + urlToCheck;
}
}
return urlPrefix + "/dashboard";