fix: handle empty and invalid strings in the schemeOverride

2026-10-18 13:39:16 +11:00 · 2023-08-07 12:14:52 -04:00
parent 9b667b3175
commit f37e8dd3bb
1 changed files with 5 additions and 0 deletions
@@ -1050,6 +1050,11 @@ public class SSOController : ControllerBase
            requestPort = -1;
        }

+        if (schemeOverride != "http" && schemeOverride != "https")
+        {
+            schemeOverride = null;
+        }
+
        return new UriBuilder
        {
            Scheme = schemeOverride ?? Request.Scheme,