JSFiddle - React, Tailwind, and code Playground

by MarkSzs

JavaScript

url = "javascript:alert(document.domain)"; // coming from the user in real life

if(!url.startsWith("https://example.com")) {
	window.location.href = "https://example.com";
}

window.location.href= url;