From 81419bf00fac76277eeac71c3d3c2d6aee0f4fa8 Mon Sep 17 00:00:00 2001 From: Fabian Jakobs Date: Mon, 21 Dec 2015 15:08:48 +0000 Subject: [PATCH] also catch wildcard protocols like //google.it --- node_modules/connect-architect/connect.redirect/redirect.js | 6 +++--- package.json | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/node_modules/connect-architect/connect.redirect/redirect.js b/node_modules/connect-architect/connect.redirect/redirect.js index 9c9e92b4..f9e10cd3 100644 --- a/node_modules/connect-architect/connect.redirect/redirect.js +++ b/node_modules/connect-architect/connect.redirect/redirect.js @@ -14,10 +14,10 @@ module.exports = function(options, imports, register) { this.end(""); }); imports.connect.addResponseMethod("secureRedirect", function(location) { - var parsedLocation = url.parse(location); - + var parsedLocation = url.parse(location, false, true); + if (!trustedDomainsRe.test(parsedLocation.host)) - location = parsedLocation.path; + location = parsedLocation.path || "/"; this.redirect(location); }); diff --git a/package.json b/package.json index 589058b3..aa90a746 100644 --- a/package.json +++ b/package.json @@ -90,6 +90,7 @@ "c9.ide.imgeditor": "#612e75ef4f", "c9.ide.immediate": "#a962119bec", "c9.ide.installer": "#0fde9f0067", + "c9.ide.language.python": "#undefined", "c9.ide.mount": "#b9a5a2d45c", "c9.ide.navigate": "#38ae100ea1", "c9.ide.newresource": "#981a408a7b",