mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-03-18 02:21:47 -05:00
e60806de45
refs https://github.com/TryGhost/Team/issues/1174 refs https://github.com/TryGhost/Members/pull/408 When logged out members navigate a site and want to interact with, for example comments, they are redirected to the homepage after sign-in with the magic link, this is disorientating, and means they then need to navigate back to the content they were interacting with. This change means that sign-in's will be redirected to the page from which they were initiated, allowing a more streamlined flow for logged out members wanting to add comments. We've restricted the redirect to URI's which are on the same domain as the site, and we also do a relative redirect, this is to ensure that a malicious actor does not send magic links which redirect off-site and leak authentication details |
||
|---|---|---|
| .. | ||
| e2e-api | ||
| e2e-browser | ||
| e2e-frontend | ||
| e2e-server | ||
| e2e-webhooks | ||
| integration | ||
| regression | ||
| unit | ||
| utils | ||
| .eslintignore | ||
| .eslintrc.js | ||
| .jshintrc | ||