Bezbednost: rešeno 7 kritičnih nalaza (HP-01 do HP-07)

2026-06-07 10:16:50 +02:00
parent df8c357566
commit 301bcaf5c4
7 changed files with 32 additions and 23 deletions
@@ -253,11 +253,10 @@ func (h *Handler) SacuvajPodesavanja(w http.ResponseWriter, r *http.Request) {
 	}

 	sledeci := r.FormValue("_next")
-	if sledeci == "" {
-		http.Redirect(w, r, "/podesavanja?sacuvano=1", http.StatusSeeOther)
-	} else {
-		http.Redirect(w, r, sledeci+"?sacuvano=1", http.StatusSeeOther)
+	if sledeci == "" || !strings.HasPrefix(sledeci, "/") {
+		sledeci = "/podesavanja"
 	}
+	http.Redirect(w, r, sledeci+"?sacuvano=1", http.StatusSeeOther)
 }

 // BackupBaze kreira konzistentnu kopiju baze i šalje je kao attachment