Function validateRedirectTarget

server/src/utils/url-security.ts:84–91

(
  location: string,
  baseUrl: string | URL,
)

 * Used when manually following redirects to prevent redirect-to-internal bypasses.
 */
export async function validateRedirectTarget(
  location: string,
  baseUrl: string | URL,
): Promise<URL> {
  const redirectUrl = new URL(location, baseUrl);
  await validateFetchUrl(redirectUrl);
  return redirectUrl;
}

/**
 * Reconstruct a URL from its validated components.