Redirect URL not allowed

Add an addtional parameter to the checkUrlValid function so that max redirect count is 0. We do not allow URLs that can be redirected because of potential security issues. Signed-off-by: Abby Hu <[email protected]>
opensearch-project · Oct 5, 2021 · b2e6656 · b2e6656
1 parent 4becb18
commit b2e6656
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/core/server/rendering/rendering_service.tsx b/src/core/server/rendering/rendering_service.tsx
@@ -317,7 +317,7 @@ export class RenderingService {
       this.logger.get('branding').info(configName + ' config is not found or invalid.');
       return false;
     }
-    return await Axios.get(url, { adapter: AxiosHttpAdapter })
+    return await Axios.get(url, { adapter: AxiosHttpAdapter, maxRedirects: 0 })
       .then(() => {
         return true;
       })