diff --git a/modules/context/context_response.go b/modules/context/context_response.go index aeeb51ba377f2..7e2779b3f5a4c 100644 --- a/modules/context/context_response.go +++ b/modules/context/context_response.go @@ -51,7 +51,7 @@ func (ctx *Context) RedirectToFirst(location ...string) { // Unfortunately browsers consider a redirect Location with preceding "//" and "/\" as meaning redirect to "http(s)://REST_OF_PATH" // Therefore we should ignore these redirect locations to prevent open redirects - if len(loc) > 1 && loc[0] == '/' && (loc[1] == '/' || loc[1] == '\\') { + if len(loc) > 1 && (loc[0] == '/' && loc[0] == '\\') && (loc[1] == '/' || loc[1] == '\\') { continue }