admin
e4afba3416
giteabot backport / giteabot (push) Canceled after 0s
giteabot / giteabot (push) Canceled after 0s
release-nightly / nightly-binary (push) Canceled after 0s
release-nightly / nightly-container (push) Canceled after 0s
cache-seeder / gobuild (push) Canceled after 0s
cache-seeder / lint (bindata, lint-backend) (push) Canceled after 0s
release-nightly-snapcraft / build-and-publish (push) Canceled after 0s
Includes direct password setup links in registration emails. Assisted-by: Codex:GPT-5
28 lines
1.2 KiB
Go
28 lines
1.2 KiB
Go
// Copyright 2023 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package common
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"gitea.dev/modules/httplib"
|
|
)
|
|
|
|
// FetchRedirectDelegate helps the "fetch" requests to redirect to the correct location
|
|
func FetchRedirectDelegate(resp http.ResponseWriter, req *http.Request) {
|
|
// When use "fetch" to post requests and the response is a redirect, browser's "location.href = uri" has limitations.
|
|
// 1. change "location" from old "/foo" to new "/foo#hash", the browser will not reload the page.
|
|
// 2. when use "window.reload()", the hash is not respected, the newly loaded page won't scroll to the hash target.
|
|
// The typical page is "issue comment" page. The backend responds "/owner/repo/issues/1#comment-2",
|
|
// then frontend needs this delegate to redirect to the new location with hash correctly.
|
|
redirect := req.FormValue("redirect")
|
|
if req.Method != http.MethodPost || !httplib.IsCurrentGiteaSiteURL(req.Context(), redirect) {
|
|
http.Error(resp, "Bad Request", http.StatusBadRequest)
|
|
return
|
|
}
|
|
// no OpenRedirect, the "redirect" is validated by "IsCurrentGiteaSiteURL" above
|
|
resp.Header().Set("Location", redirect)
|
|
resp.WriteHeader(http.StatusSeeOther)
|
|
}
|