✨ (CodeQL) Sanitize URL Host with Allowlist

pixee · Jul 21, 2024 · a2a77a4 · a2a77a4
1 parent bc9cef1
commit a2a77a4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/routes/updateUserProfile.ts b/routes/updateUserProfile.ts
@@ -21,7 +21,7 @@ module.exports = function updateUserProfile () {
         if (user != null) {
           challengeUtils.solveIf(challenges.csrfChallenge, () => {
             return ((req.headers.origin?.includes('://htmledit.squarefree.com')) ??
-              (req.headers.referer?.includes('://htmledit.squarefree.com'))) &&
+              (new URL(req.headers.referer).hostname === 'htmledit.squarefree.com')) &&
               req.body.username !== user.username
           })
           void user.update({ username: req.body.username }).then((savedUser: UserModel) => {