diff --git a/client/src/lib/auth.ts b/client/src/lib/auth.ts index 0e044037..7012c782 100644 --- a/client/src/lib/auth.ts +++ b/client/src/lib/auth.ts @@ -134,6 +134,12 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider { } redirectToAuthorization(authorizationUrl: URL) { + if ( + authorizationUrl.protocol !== "http:" && + authorizationUrl.protocol !== "https:" + ) { + throw new Error("Authorization URL must be HTTP or HTTPS"); + } window.location.href = authorizationUrl.href; }