Function ValidateRedirectURIScheme

codersdk/oauth2_validation.go:92–94

ValidateRedirectURIScheme reports whether the callback URL's scheme is safe to use as a redirect target. It returns an error when the scheme is empty, an unsupported URN, or one of the schemes that are dangerous in browser/HTML contexts (javascript, data, file, ftp). Legitimate custom schemes for n

(u *url.URL)

// Legitimate custom schemes for native apps (e.g. vscode://, jetbrains://)
// are allowed.
func ValidateRedirectURIScheme(u *url.URL) error {
	return validateScheme(u)
}

func validateScheme(u *url.URL) error {
	if u.Scheme == "" {