Don't use '/' as ReturnTo URL

sillsdev · Nov 22, 2024 · 6deb838 · 6deb838
1 parent c9d390c
commit 6deb838
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/frontend/src/hooks.server.ts b/frontend/src/hooks.server.ts
@@ -46,7 +46,10 @@ export const handle: Handle = ({ event, resolve }) => {
       return resolve(event, options);
     } else if (!isAuthn(cookies)) {
       const relativePath = event.url.href.substring(event.url.origin.length);
-      redirect(307, `/login?ReturnUrl=${encodeURIComponent(relativePath)}`);
+      if (relativePath !== '/')
+        redirect(307, `/login?ReturnUrl=${encodeURIComponent(relativePath)}`);
+      else
+        redirect(307, '/login');
     }
     //when at home
     if (routeId == `/${AUTHENTICATED_ROOT}`) {