steve
/
sunrise-cms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

attempt to fix codeql vulnerability

deepsource-autofix-76c6eb20
Dan Gowans 2022-08-22 15:49:08 -04:00
parent 2b6ef96851
commit 4090714ace
2 changed files with 27 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
routes/login.js
View File

@ -4,17 +4,19 @@ import * as authenticationFunctions from "../helpers/functions.authentication.js
export const router = Router(); export const router = Router();
const getSafeRedirectURL = (possibleRedirectURL = "") => { const getSafeRedirectURL = (possibleRedirectURL = "") => {
const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix"); const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix");
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ? if (typeof (possibleRedirectURL) === "string") {
possibleRedirectURL.slice(urlPrefix.length) : const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL).toLowerCase(); possibleRedirectURL.slice(urlPrefix.length) :
switch (urlToCheck) { possibleRedirectURL).toLowerCase();
case "/admin/fees": switch (urlToCheck) {
case "/lotOccupancies": case "/admin/fees":
case "/lots": case "/lotOccupancies":
case "/maps": case "/lots":
case "/workOrders": case "/maps":
case "/reports": case "/workOrders":
return urlPrefix + urlToCheck; case "/reports":
return urlPrefix + urlToCheck;
}
} }
return urlPrefix + "/dashboard"; return urlPrefix + "/dashboard";
}; };

25
routes/login.ts
View File

@ -15,19 +15,22 @@ const getSafeRedirectURL = (possibleRedirectURL = "") => {
const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix"); const urlPrefix = configFunctions.getProperty("reverseProxy.urlPrefix");
const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ? if (typeof (possibleRedirectURL) === "string") {
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase(); const urlToCheck = (possibleRedirectURL.startsWith(urlPrefix) ?
possibleRedirectURL.slice(urlPrefix.length) :
possibleRedirectURL).toLowerCase();
switch (urlToCheck) { switch (urlToCheck) {
case "/admin/fees": case "/admin/fees":
case "/lotOccupancies": case "/lotOccupancies":
case "/lots": case "/lots":
case "/maps": case "/maps":
case "/workOrders": case "/workOrders":
case "/reports": case "/reports":
return urlPrefix + urlToCheck; return urlPrefix + urlToCheck;
}
} }
return urlPrefix + "/dashboard"; return urlPrefix + "/dashboard";