diff --git a/fence/blueprints/link.py b/fence/blueprints/link.py index b77c587bf..9fda3cd30 100644 --- a/fence/blueprints/link.py +++ b/fence/blueprints/link.py @@ -7,6 +7,7 @@ from cdislogging import get_logger from cirrus import GoogleCloudManager +from fence.blueprints.login.redirect import validate_redirect from fence.restful import RestfulApi from fence.errors import NotFound from fence.errors import Unauthorized @@ -101,6 +102,9 @@ def delete(self): def _link_google_account(): provided_redirect = flask.request.args.get("redirect") + # will raise UserError if invalid + validate_redirect(provided_redirect) + if not provided_redirect: raise UserError({"error": "No redirect provided."})