Function wasm_service_oauth::is_valid_return_url[][src]

pub fn is_valid_return_url(return_url: &str) -> bool

Perform some checks on validity of return_url. The primary purpose of this check is to avoid XSS attacks or other attacks where url is either too long or contains invalid characters. We do not verify whether the domain and path of the url are part of this app (that check would require additional configuration parameters, which could be error-prone, and might not be that useful). Since this is only used in the oauth flow, the performance overhead of url parsing should be negligible.