kitos/Aegis
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc
Aegis CI / lint-and-test (push) Has been cancelled
Details
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Details
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Details
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Details

Browse Source
This commit is contained in:
kitos
2026-06-24 14:32:32 +02:00
parent cef082d0c4
commit 7f990987de
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/routers/sso.py
+2 -1
View File
@@ -76,7 +76,8 @@ def sso_login(request: Request, db: Session = Depends(get_db)):
except RuntimeError as exc:
raise HTTPException(status_code=503, detail=str(exc))
redirect_url = result["redirect_url"]
if urlparse(redirect_url).scheme not in ("http", "https"):
_parsed = urlparse(redirect_url.strip())
if _parsed.scheme not in ("http", "https") or not _parsed.netloc:
raise HTTPException(status_code=400, detail="Invalid IdP redirect URL")
return RedirectResponse(url=redirect_url)