Skip to content

[v7] Validate client-side navigation targets - #15446

Merged
brophdawg11 merged 1 commit into
v7from
brophdawg11/codex-v7-navigation-origin-check
Aug 27, 2026
Merged

[v7] Validate client-side navigation targets#15446
brophdawg11 merged 1 commit into
v7from
brophdawg11/codex-v7-navigation-origin-check

Conversation

@brophdawg11

Copy link
Copy Markdown
Contributor

Backport of #15445 to v7.

This improves consistency when handling client-side navigation targets by validating both the supplied destination and its resolved URL.

  • Programmatic navigations reject unsupported external destinations.
  • Client-side redirects continue to support explicit external destinations.
  • External links and server-side redirects remain supported.

Assisted-By: devx/aaadeb35-56c3-489a-a810-9ba5c4bbf995
@github-actions

Copy link
Copy Markdown
Contributor

Preview Build Available

Preview builds have been created for this PR. You can install react-router using:

pnpm install "remix-run/react-router#preview/pr-15446&path:packages/react-router"

And/or install other packages via:

pnpm install "remix-run/react-router#preview/pr-15446&path:packages/react-router-dev"
pnpm install "remix-run/react-router#preview/pr-15446&path:packages/react-router-express"
pnpm install "remix-run/react-router#preview/pr-15446&path:packages/react-router-node"
pnpm install "remix-run/react-router#preview/pr-15446&path:packages/react-router-serve"

These preview builds will be updated automatically as you push new commits.

@brophdawg11
brophdawg11 marked this pull request as ready for review August 27, 2026 18:52
@brophdawg11
brophdawg11 merged commit 38af67f into v7 Aug 27, 2026
12 checks passed
@brophdawg11
brophdawg11 deleted the brophdawg11/codex-v7-navigation-origin-check branch August 27, 2026 20:03
@ryanflorence ryanflorence mentioned this pull request Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant