Sanitize URL

OpenConext · Sep 29, 2024 · 449a8f9 · 449a8f9
1 parent 83333f7
commit 449a8f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/welcome/src/pages/Proceed.js b/welcome/src/pages/Proceed.js
@@ -111,7 +111,7 @@ export const Proceed = () => {
         if (isEmpty(inviteRedeemUrl)) {
             setShowModal(false);
         } else {
-            window.location.href = inviteRedeemUrl;
+            window.location.href = DOMPurify.sanitize(inviteRedeemUrl);
         }
     }