feat : update
This commit is contained in:
@@ -7,7 +7,7 @@ describe("public auth return path", () => {
|
||||
});
|
||||
|
||||
it("rejects external destinations and auth loops", () => {
|
||||
for (const value of ["https://example.com", "//example.com", "/\\example.com", "/login", "/lo%67in", "/register", "/admin/login", 4])
|
||||
for (const value of ["https://example.com", "//example.com", "/\\example.com", "/login", "/lo%67in", "/register", "/auth/login", "/auth/register", "/auth/check-email", "/auth/password-reset", "/admin/login", 4])
|
||||
expect(safeAuthReturnPath(value)).toBe("/");
|
||||
});
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user