summaryrefslogtreecommitdiff
path: root/plugins/OpenID/finishopenidlogin.php
diff options
context:
space:
mode:
authorEvan Prodromou <evan@status.net>2010-03-25 16:58:05 -0400
committerEvan Prodromou <evan@status.net>2010-03-25 16:58:05 -0400
commit9c63ae6e443e7b23f64e31617a1762393473509a (patch)
tree740ce8c74676f0ee5c6d1482891ad01d8c79a9a9 /plugins/OpenID/finishopenidlogin.php
parent5b23b7e7367a1c42ac5e44b0d799328a8235d96c (diff)
add whitelist and blacklist for openid URLs
Diffstat (limited to 'plugins/OpenID/finishopenidlogin.php')
-rw-r--r--plugins/OpenID/finishopenidlogin.php3
1 files changed, 3 insertions, 0 deletions
diff --git a/plugins/OpenID/finishopenidlogin.php b/plugins/OpenID/finishopenidlogin.php
index 1f9bde0f1..f3a483300 100644
--- a/plugins/OpenID/finishopenidlogin.php
+++ b/plugins/OpenID/finishopenidlogin.php
@@ -158,6 +158,9 @@ class FinishopenidloginAction extends Action
$canonical = ($response->endpoint->canonicalID) ?
$response->endpoint->canonicalID : $response->getDisplayIdentifier();
+ oid_assert_allowed($display);
+ oid_assert_allowed($canonical);
+
$sreg_resp = Auth_OpenID_SRegResponse::fromSuccessResponse($response);
if ($sreg_resp) {