fix issue where scope would be missing the * if the user was not logged in before calling the authorize endpoint

fix #4200
2023-12-21 13:50:32 +08:00 · 2023-12-21 13:50:32 +08:00 · 0917efd9cb
commit 0917efd9cb
parent 97c4165f55
1 changed files with 1 additions and 1 deletions
--- a/src/invidious/helpers/utils.cr
+++ b/src/invidious/helpers/utils.cr
@ -262,7 +262,7 @@ def get_referer(env, fallback = "/", unroll = true)
  end

  referer = referer.request_target
-  referer = "/" + referer.gsub(/[^\/?@&%=\-_.:,0-9a-zA-Z]/, "").lstrip("/\\")
+  referer = "/" + referer.gsub(/[^\/?@&%=\-_.:,*0-9a-zA-Z]/, "").lstrip("/\\")

  if referer == env.request.path
    referer = fallback