From e54e55dfbf7e0afdec6133b3b151021d27ec429c Mon Sep 17 00:00:00 2001
From: Eliseu Amaro <mail@eliseuama.ro>
Date: Tue, 26 Oct 2021 17:25:45 +0100
Subject: [PATCH] [EXCEPTION][RedirectException] You are now able to redirect
 to a specific url.

---
 src/Util/Exception/RedirectException.php | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/src/Util/Exception/RedirectException.php b/src/Util/Exception/RedirectException.php
index ac7c01835e..7fa1c76444 100644
--- a/src/Util/Exception/RedirectException.php
+++ b/src/Util/Exception/RedirectException.php
@@ -33,17 +33,21 @@ class RedirectException extends Exception
 
     /**
      * Used for responding to a request with a redirect. Either
-     * generates a url from a $route_id and $params or fully formed,
+     * generates a url from a $route_id_or_path and $params or fully formed,
      * from $url. Prevents open redirects, unless $allow_open_redirect
      */
-    public function __construct(string $route_id = '', array $params = [], string $message = '', int $code = 302, ?string $url = null, bool $allow_open_redirect = false, ?Exception $previous_exception = null)
+    public function __construct(string $route_id_or_path = '', array $params = [], string $message = '', int $code = 302, ?string $url = null, bool $allow_open_redirect = false, ?Exception $previous_exception = null)
     {
-        if (!empty($route_id) || !empty($url)) {
-            $url ??= Router::url($route_id, $params, Router::ABSOLUTE_PATH); // Absolute path doesn't include host
-            if (!$allow_open_redirect) {
-                if (Router::isAbsolute($url)) {
-                    Log::warning("A RedirectException that shouldn't allow open redirects attempted to redirect to {$url}");
-                    throw new ServerException(_m('Can not redirect to outside the website from here'), 5400); // 500 Internal server error (likely a bug)
+        if (!empty($route_id_or_path) || !empty($url)) {
+            if ($route_id_or_path[0] === '/') {
+                $url = "https://{$_ENV['SOCIAL_DOMAIN']}{$route_id_or_path}";
+            } else {
+                $url ??= Router::url($route_id_or_path, $params, Router::ABSOLUTE_PATH); // Absolute path doesn't include host
+                if (!$allow_open_redirect) {
+                    if (Router::isAbsolute($url)) {
+                        Log::warning("A RedirectException that shouldn't allow open redirects attempted to redirect to {$url}");
+                        throw new ServerException(_m('Can not redirect to outside the website from here'), 5400); // 500 Internal server error (likely a bug)
+                    }
                 }
             }
             $this->redirect_response = new RedirectResponse($url);