Skip to content

Commit 6ed842a

Browse files
[autofix.ci] apply automated fixes
1 parent 551bb2c commit 6ed842a

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

server/api/auth/atproto.get.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,8 @@ export default defineEventHandler(async event => {
1919
const query = getQuery(event)
2020
const rawReturnTo = query.returnTo?.toString() || '/'
2121
// Validate returnTo is a safe relative path (prevent open redirect)
22-
const isRelativePath = rawReturnTo.startsWith('/') && !rawReturnTo.startsWith('//') && !rawReturnTo.includes(':')
22+
const isRelativePath =
23+
rawReturnTo.startsWith('/') && !rawReturnTo.startsWith('//') && !rawReturnTo.includes(':')
2324
const returnTo = isRelativePath ? rawReturnTo : '/'
2425

2526
setCookie(event, 'auth_return_to', returnTo, {

0 commit comments

Comments
 (0)