Skip to content

fix: produce relative redirect location url for same origin #3129

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Sep 16, 2025
+29 −6
Merged

fix: produce relative redirect location url for same origin #3129

Changes from 2 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
767ab97
fix: produce relative redirect location url for same origin
pieh Sep 16, 2025
9267bc8
Merge branch 'main' into fix/middleware-generate-relative-redirect-lo…
pieh Sep 16, 2025
dbde615
test: add basic unit tests for relativizeURL
pieh Sep 16, 2025
9fcd6b4
test: adjust integration tests redirect assertions
pieh Sep 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion edge-runtime/lib/response.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -210,7 +210,7 @@ export const buildResponse = async ({
logger.withFields({ redirect_url: redirect }).debug('Redirect url is same as original url')
return
}
edgeResponse.headers.set('location', redirect)
edgeResponse.headers.set('location', relativizeURL(redirect, request.url))
Copy link
Contributor Author

@pieh pieh Sep 16, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: if redirect target is external, the location will remain absolute - relativeURL only make it relative if origin/host of redirect and request.url matches

opennextjs-netlify/edge-runtime/lib/util.ts

Lines 85 to 92 in c29381e

export function relativizeURL(url: string | string, base: string | URL) {
const baseURL = typeof base === 'string' ? new URL(base) : base
const relative = new URL(url, base)
const origin = `${baseURL.protocol}//${baseURL.host}`
return `${relative.protocol}//${relative.host}` === origin
? relative.toString().replace(origin, '')
: relative.toString()
}

Added some unit tests for this in dbde615

}

// Data requests shouldn't automatically redirect in the browser (they might be HTML pages): they're handled by the router
Expand Down
Loading