From 00432bcfd670f28c2ae55ddcfafbf70ad4a0f5bf Mon Sep 17 00:00:00 2001 From: Trong Huu Nguyen Date: Wed, 3 May 2023 08:38:12 +0200 Subject: [PATCH] fix(url/validator): return early if allowed domain is empty --- pkg/url/validator.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkg/url/validator.go b/pkg/url/validator.go index 81e81d7..c14b3d6 100644 --- a/pkg/url/validator.go +++ b/pkg/url/validator.go @@ -129,6 +129,10 @@ func isValidAbsolutePath(redirect string) bool { } func isAllowedDomain(u *url.URL, allowed string) bool { + if len(allowed) == 0 { + return false + } + host := u.Host hostname := u.Hostname()