Merge pull request #9 from beackers/security-patch-2

fix security bug

Author: beackers

myop.db

@@ -47,7 +47,7 @@ function addANav() {
     }
 
     sel.addEventListener("change", () => {
-        if (sel.value !== current) {
+        if (sel.value !== current && acceptablePaths.includes(window.location.pathname)) {
             window.location.href = sel.value;
         }
     });