diff --git a/packages/web/src/pages/oauth-login-page/utils.ts b/packages/web/src/pages/oauth-login-page/utils.ts index be60b6e9907..c1bd3351b51 100644 --- a/packages/web/src/pages/oauth-login-page/utils.ts +++ b/packages/web/src/pages/oauth-login-page/utils.ts @@ -21,7 +21,8 @@ export const getIsRedirectValid = ({ if (parsedRedirectUri === 'postmessage') { return true } - const { hash, username, password, pathname, hostname, protocol } = parsedRedirectUri + const { hash, username, password, pathname, hostname, protocol } = + parsedRedirectUri // Ensure that the redirect_uri protocol is http or https // IMPORTANT: If this validation is not done, users can // use the redirect_uri to execute arbitrary code on the host