egg-kauth - npm Package Compare versions

Comparing version 2.0.13-alpha.4 to 2.0.13-alpha.5

app/lib/index.js

 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -6,2 +9,3 @@ exports.KauthProvider = void 0;
 const url_1 = require("url");
+const path_1 = __importDefault(require("path"));
 class KauthProvider {
@@ -92,3 +96,4 @@ maxAge = 2147483647;
         });
-        if (callback) {
+        // for security reason, onlt allow relative path
+        if (callback && path_1.default.normalize(callback).startsWith('/')) {
             ctx.redirect(callback);
@@ -95,0 +100,0 @@ return;

package.json

 {
   "name": "egg-kauth",
-  "version": "2.0.13-alpha.4",
+  "version": "2.0.13-alpha.5",
   "description": "egg kauth plugin",
@@ -5,0 +5,0 @@ "eggPlugin": {

No alert changes

Improved metrics

Total package byte prevSize

27398

increased by1.1%

Lines of code

632

increased by0.8%

No dependency changes