feat: add sign-out redirect URL and enhance sign-in redirect handling
This commit is contained in:
@@ -26,7 +26,9 @@ describe("resolveSignInRedirectUrl", () => {
|
||||
it("rejects protocol-relative urls", () => {
|
||||
vi.stubEnv("NEXT_PUBLIC_CLERK_SIGN_IN_FALLBACK_REDIRECT_URL", "/activity");
|
||||
|
||||
expect(resolveSignInRedirectUrl("//evil.example.com/path")).toBe("/activity");
|
||||
expect(resolveSignInRedirectUrl("//evil.example.com/path")).toBe(
|
||||
"/activity",
|
||||
);
|
||||
});
|
||||
|
||||
it("rejects external absolute urls", () => {
|
||||
|
||||
Reference in New Issue
Block a user