mirror of
https://github.com/Luzifer/anti-followbot.git
synced 2024-12-22 13:51:17 +00:00
SEC: Remove token from URL after reading
Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
parent
18d06a8926
commit
2eae3b8266
1 changed files with 1 additions and 0 deletions
1
app.js
1
app.js
|
@ -290,6 +290,7 @@ new Vue({
|
|||
mounted() {
|
||||
this.twitchToken = new URLSearchParams(window.location.hash.substr(1)).get('access_token') || null
|
||||
if (this.twitchToken) {
|
||||
window.location.hash = '' // Remove token from hash for security
|
||||
this.initChart()
|
||||
}
|
||||
},
|
||||
|
|
Loading…
Reference in a new issue