Merge commit from fork

packages/validation/src/redirection-url.ts

@@ -0,0 +1,14 @@
+/**
+ * Sanitizes the URL from malicious payloads.
+ * Prevents open redirects such as //example.com/path
+ * and prevents XSS such as javascript:().
+ * Returns / as a default or when unsafe.
+ * @param url The URL to sanitize
+ */
+export const sanitizeRedirectionUrl = (url?: string) => {
+  if (url && url.startsWith("/") && !url.startsWith("//")) {
+    return url;
+  } else {
+    return '/'; // Safe default
+  }
+}