modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

fix(auth): sanitize authorization URL

Browse source
This commit is contained in:
superboy-zjc 2025-08-06 13:00:08 -07:00
commit d21e51e6ab
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
client/src/lib/auth.ts
View file

@ -129,6 +129,12 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider {
}
redirectToAuthorization(authorizationUrl: URL) {
if (
authorizationUrl.protocol !== "http:" &&
authorizationUrl.protocol !== "https:"
) {
throw new Error("Authorization URL must be HTTP or HTTPS");
}
window.location.href = authorizationUrl.href;
}