plane
plane copied to clipboard
fix: onboarding redirection loop and bug fixes
Problem:
- Experiencing a redirection loop problem while signing up with a new email. To replicate:
- Sign up using a new email address.
- Enter a unique code as prompted.
- Proceed to the "Set Up Workspace" feature.
- The copy issue link is malfunctioning.
- Inconsistent use of "next_url" and "next_path" in various locations.
- Lack of validation for the "next_path" URL poses a significant security vulnerability.
Resolution:
- Removed unnecessary hooks from the onboarding page, potentially eliminating the infinite loop & Implemented a try-catch block in the 'handleSignInRedirection' function for additional error handling.
- Rectify the copy issue link by removing the extra slash at the beginning.
- Ensure consistency by standardizing all references to "next_path."
- Implement validation for "next_path" redirection to prevent potential Client-side cross-site scripting vulnerabilities.
These issues are associated with following: