SEC: Remove token from URL after reading

Signed-off-by: Knut Ahlers <knut@ahlers.me>
2024-09-19 13:02:56 +00:00 · 2021-07-11 16:13:29 +02:00 · 2021-07-11 16:13:29 +02:00 · 2eae3b8266
commit 2eae3b8266
parent 18d06a8926
1 changed files with 1 additions and 0 deletions
--- a/app.js
+++ b/app.js
@ -290,6 +290,7 @@ new Vue({
  mounted() {
    this.twitchToken = new URLSearchParams(window.location.hash.substr(1)).get('access_token') || null
    if (this.twitchToken) {
+      window.location.hash = '' // Remove token from hash for security
      this.initChart()
    }
  },