Make sure internal redirects are actually internal

This fixes #32
thijzert · Jun 7, 2024 · 7ad8523 · 7ad8523
1 parent 6a46f01
commit 7ad8523
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/internal/web-plumbing/redirect.go b/internal/web-plumbing/redirect.go
@@ -15,6 +15,8 @@ func (s *Server) redirect(w http.ResponseWriter, r *http.Request, url string, st
 
 	if len(url) == 0 {
 		url = "."
+	} else if len(url) > 1 && url[:2] == "//" {
+		url = "."
 	} else if url[0] != '/' && url[0] != '.' {
 		url = "./" + url
 	}