diff --git a/server/main.py b/server/main.py index 4b3b2e9..816cee8 100644 --- a/server/main.py +++ b/server/main.py @@ -277,7 +277,7 @@ async def changepasswd(password: str = Form(), session: Annotated[str | None, Co @app.get("/login") async def login(state: str = "", client_id: str = "", redirect_url: str = "/user", session: Annotated[str | None, Cookie()] = None): now_redirect_url = redirect_url.replace( - "https://", "").replace("http://", "").split("#")[0].rstrip("/") + "https://", "").replace("http://", "").split("#")[0].split("/")[0] if (now_redirect_url not in REDIRECT_URL_WHITELIST): return templates.TemplateResponse("checkemail.html", {"request": {}, "msg": cfg.lang["invalid_redirect_url"], "ui": cfg.config["ui"], "lang": cfg.lang}) if (session is not None):