Relyra.Security.Redirect (relyra v1.1.0)

Copy Markdown View Source

Security utility for validating redirect paths to prevent Open Redirect vulnerabilities.

Summary

Functions

safe_local_redirect(path, opts \\ [])

Validates a path is a safe local redirect.

Functions

safe_local_redirect(path, opts \\ [])

@spec safe_local_redirect(
  binary() | nil,
  keyword()
) :: {:ok, binary()} | {:error, Relyra.Error.t()}

Validates a path is a safe local redirect.

Rejects:

  • Absolute URLs (http://, https://)
  • Protocol-relative URLs (//)
  • Paths not starting with /
  • Nil or non-binary values