View GitHub Repository silverstripe-activedirectory

Schedule Inspection
Subscribe

Code Duplication    Length = 3-3 lines in 2 locations

code/control/SAMLController.php 2 locations

@@ 145-147 (lines=3) @@
142 
    protected function getRedirect()
143 
    {
144 
        // Absolute redirection URLs may cause spoofing
145 
        if (Session::get('BackURL') && Director::is_site_url(Session::get('BackURL'))) {
146 
            return $this->redirect(Session::get('BackURL'));
147 
        }
148 

                                

                                                            

                                    149
                                    
                                    
        // Spoofing attack, redirect to homepage instead of spoofing url

                                

                                                            

                                    150
                                    
                                    
        if (Session::get('BackURL') && !Director::is_site_url(Session::get('BackURL'))) {

                                

                                                                                

                                
                                
                                    @@ 150-152 (lines=3) @@
                                
                            


                                                            

                                    147
                                    
                                    
        }

                                

                                                            

                                    148
                                    
                                    

                                

                                                            

                                    149
                                    
                                    
        // Spoofing attack, redirect to homepage instead of spoofing url

                                

                                                            

                                    150
                                    
                                    
        if (Session::get('BackURL') && !Director::is_site_url(Session::get('BackURL'))) {

                                

                                                            

                                    151
                                    
                                    
            return $this->redirect(Director::absoluteBaseURL());

                                

                                                            

                                    152
                                    
                                    
        }

                                

                                                            

                                    153
                                    
                                    

                                

                                                            

                                    154
                                    
                                    
        // If a default login dest has been set, redirect to that.

                                

                                                            

                                    155
                                    
                                    
        if (Security::config()->default_login_dest) {