Merge pull request #6 from dalibor31/alert-autofix-9

Potential fix for code scanning alert no. 9: Bad redirect check

internal/handler/podesavanja.go

@@ -263,9 +263,9 @@ func (h *Handler) SacuvajPodesavanja(w http.ResponseWriter, r *http.Request) {
 		}
 	}
 
-	sledeci := r.FormValue("_next")
+	sledeci := "/podesavanja"
-	if sledeci == "" || !strings.HasPrefix(sledeci, "/") {
+	if next := r.FormValue("_next"); strings.HasPrefix(next, "/") && (len(next) == 1 || (next[1] != '/' && next[1] != '\\')) {
-		sledeci = "/podesavanja"
+		sledeci = next
 	}
 
 	// backup podešavanja — pri neispravnom unosu javljamo jasnu grešku