github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-29 01:31:35 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: Allow wildcard in allowed_user_api_auth_redirects setting (#6779)

Browse Source
This commit is contained in:
Davide Porrovecchio
2019-02-26 17:03:20 +01:00
committed by Régis Hanol
parent 8c706b0ff7
commit 75aaae5d5c
4 changed files with 22 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/user_api_keys_controller.rb
View File

@ -53,7 +53,7 @@ class UserApiKeysController < ApplicationController
if params.key?(:auth_redirect) && SiteSetting.allowed_user_api_auth_redirects
.split('|')
.none? { |u| params[:auth_redirect] == u }
.none? { |u| WildcardUrlChecker.check_url(u, params[:auth_redirect]) }
raise Discourse::InvalidAccess
end