Merge branch 'main' into Xe/proof-of-react

Signed-off-by: Xe Iaso <xe.iaso@techaro.lol>
This commit is contained in:
Xe Iaso
2025-08-29 15:32:52 -04:00
committed by GitHub
55 changed files with 2653 additions and 182 deletions

View File

@@ -436,6 +436,7 @@ func (s *Server) PassChallenge(w http.ResponseWriter, r *http.Request) {
return
}
if (len(urlParsed.Host) > 0 && len(s.opts.RedirectDomains) != 0 && !slices.Contains(s.opts.RedirectDomains, urlParsed.Host)) || urlParsed.Host != r.URL.Host {
lg.Debug("domain not allowed", "domain", urlParsed.Host)
s.respondWithError(w, r, localizer.T("redirect_domain_not_allowed"))
return
}