Fix logout

webstudio-is · Sep 3, 2024 · e4f6b47 · e4f6b47
1 parent 78631eb
commit e4f6b47
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/apps/builder/app/routes/builder-logout.ts b/apps/builder/app/routes/builder-logout.ts
@@ -26,6 +26,11 @@ export const action = async ({ request }: ActionFunctionArgs) => {
     );
   }
 
+  if (request.headers.get("sec-fetch-site") === "same-origin") {
+    // To prevent logout initiated from the builder iframe
+    throw new Error("Only cross-origin requests are allowed");
+  }
+
   if (
     false === request.headers.get("Content-Type")?.includes("application/json")
   ) {