From 4c94838010446ac8a4b6f819ab570cf83f68e300 Mon Sep 17 00:00:00 2001
From: letm3through <letm3through@gmail.com>
Date: Mon, 10 Jun 2024 00:00:19 +0900
Subject: [PATCH] =?UTF-8?q?[fix]=20#582=20Open=20Redirect=20=EA=B2=80?=
 =?UTF-8?q?=EC=A6=9D=20=EB=A1=9C=EC=A7=81=20=EC=9A=B0=ED=9A=8C=20=EC=B7=A8?=
 =?UTF-8?q?=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 lib/dependency/dependencies.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/dependency/dependencies.py b/lib/dependency/dependencies.py
index 47b1b08b4..6e99ff38b 100644
--- a/lib/dependency/dependencies.py
+++ b/lib/dependency/dependencies.py
@@ -263,6 +263,7 @@ def validate_login_url(request: Request, url: str = Form(default="/")):
     allow_urls = []
 
     if (url
+            or url.startswith("//")
             and not url.startswith("/")
             and not url.startswith(str(request.base_url))
             and url not in allow_urls):