Skip to content

Function: isSafeRedirect()

ts
function isSafeRedirect(redirect, options?): boolean;

判断 redirect 是否安全(站内路径、不在黑名单内)。

Parameters

ParameterType
redirectstring | null | undefined
optionsSafeRedirectOptions

Returns

boolean

Example

ts
isSafeRedirect('/dashboard')           // => true
isSafeRedirect('/login')               // => false  (黑名单)
isSafeRedirect('//evil.com')           // => false  (协议相对 URL)
isSafeRedirect('https://evil.com')     // => false  (外站)
isSafeRedirect('/javascript:alert(1)') // => false
isSafeRedirect('/admin', { denyList: ['/admin'] }) // => false

Released under the MIT License.