added duofederal.com to valid urls (#11137)

This commit is contained in:
Ike 2024-09-19 11:32:42 -04:00 committed by GitHub
parent 19f4afcd2b
commit afff91e0f3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 1 deletions

View File

@ -52,7 +52,11 @@ window.addEventListener("load", async () => {
function redirectToDuoFrameless(redirectUrl: string) {
const validateUrl = new URL(redirectUrl);
if (validateUrl.protocol !== "https:" || !validateUrl.hostname.endsWith("duosecurity.com")) {
if (
validateUrl.protocol !== "https:" ||
!validateUrl.hostname.endsWith("duosecurity.com") ||
!validateUrl.hostname.endsWith("duofederal.com")
) {
throw new Error("Invalid redirect URL");
}