fix: Update login URL construction in layoutauth.html and restrict postMessage targetOrigin in layout-designer-page.twig
This commit is contained in:
@@ -195,7 +195,7 @@
|
||||
.catch(function () {
|
||||
// Not authenticated — send to the CMS login page, preserving the return URL
|
||||
var returnUrl = encodeURIComponent(window.location.href);
|
||||
var loginUrl = window.location.origin + "/" + slug + "/cms/login?redirect=" + returnUrl;
|
||||
var loginUrl = window.location.origin + cmsBase + "/login?redirect=" + returnUrl;
|
||||
window.location.replace(loginUrl);
|
||||
});
|
||||
})();
|
||||
|
||||
Reference in New Issue
Block a user