tree 11308d08bd2e0ad95d47fd8ffbad934fc2e58375
parent 425ed044e9422ad17e8d1924387620cd3d925f37
author James Feist <james.feist@linux.intel.com> 1581355507 -0800
committer Gunnar Mills <gmills@us.ibm.com> 1581439382 +0000

Block forwarding to non-local url

Currently we don't protect against forwarding to remote
url, so things like:

https://<bmc-address>/#/login?next=http:%2F%2Fyahoo.com

can be used to forward an unsuspecting user to a different
url. This fixes that issue.

Tested: Local redirects still work, above link does not

Closes #109

Change-Id: I4d6c52880156802860f405af43037fb84235912f
Signed-off-by: James Feist <james.feist@linux.intel.com>