Harden release console token bootstrap

2026-07-21 03:16:57 +02:00
parent fcc5885dcf
commit 17f8036bdc
4 changed files with 51 additions and 4 deletions
--- a/tools/release/webui/index.html
+++ b/tools/release/webui/index.html
@@ -768,11 +768,15 @@
    </div>

    <script>
-      const params = new URLSearchParams(window.location.search);
-      const token = params.get("token") || sessionStorage.getItem("releaseConsoleToken") || "";
+      const fragmentParams = new URLSearchParams(window.location.hash.slice(1));
+      const fragmentToken = fragmentParams.get("token") || "";
+      const token = fragmentToken || sessionStorage.getItem("releaseConsoleToken") || "";
      if (token) {
        sessionStorage.setItem("releaseConsoleToken", token);
      }
+      if (fragmentToken) {
+        history.replaceState(null, document.title, `${window.location.pathname}${window.location.search}`);
+      }

      const elements = {
        channel: document.getElementById("channel"),