From 2f958475469f343cc5ccb999c29a0eec2dad5f20 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dalibor=20Markovi=C4=87?= Date: Tue, 16 Jun 2026 03:13:43 +0200 Subject: [PATCH] Potential fix for code scanning alert no. 9: Bad redirect check Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- internal/handler/podesavanja.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/internal/handler/podesavanja.go b/internal/handler/podesavanja.go index 48c48d4..43118ac 100644 --- a/internal/handler/podesavanja.go +++ b/internal/handler/podesavanja.go @@ -263,9 +263,9 @@ func (h *Handler) SacuvajPodesavanja(w http.ResponseWriter, r *http.Request) { } } - sledeci := r.FormValue("_next") - if sledeci == "" || !strings.HasPrefix(sledeci, "/") { - sledeci = "/podesavanja" + sledeci := "/podesavanja" + if next := r.FormValue("_next"); strings.HasPrefix(next, "/") && (len(next) == 1 || (next[1] != '/' && next[1] != '\\')) { + sledeci = next } // backup podešavanja — pri neispravnom unosu javljamo jasnu grešku