mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-02-10 23:36:14 -05:00
refs https://github.com/TryGhost/Team/issues/1174 refs https://github.com/TryGhost/Members/pull/408 When logged out members navigate a site and want to interact with, for example comments, they are redirected to the homepage after sign-in with the magic link, this is disorientating, and means they then need to navigate back to the content they were interacting with. This change means that sign-in's will be redirected to the page from which they were initiated, allowing a more streamlined flow for logged out members wanting to add comments. We've restricted the redirect to URI's which are on the same domain as the site, and we also do a relative redirect, this is to ensure that a malicious actor does not send magic links which redirect off-site and leak authentication details |
||
---|---|---|
.. | ||
config.test.js | ||
content-gating.test.js | ||
middleware.test.js | ||
stripe-connect.test.js | ||
utils.test.js |