chore: use Route helper

web/src/lib/route.ts

@@ -152,4 +152,13 @@ export const Route = {
   // queues
   queues: () => '/admin/queues',
   viewQueue: ({ name }: { name: QueueName }) => `/admin/queues/${asQueueSlug(name)}`,
+
+  // continue helper for ensuring same-origin URLs
+  continue: (url: string | null, fallback: string) => {
+    if (!url || !url.startsWith('/') || url.startsWith('//')) {
+      return fallback;
+    }
+
+    return url;
+  },
 };

web/src/routes/auth/login/+page.ts

@@ -8,15 +8,10 @@ import type { PageLoad } from './$types';
 export const load = (async ({ parent, url }) => {
   await parent();
 
-  let continueUrl = url.searchParams.get('continue');
-
-  // require same origin continue URL
-  if (!continueUrl || !continueUrl.startsWith('/') || continueUrl.startsWith('//')) {
-    continueUrl = Route.photos();
-  }
+  const continueUrl = url.searchParams.get('continue');
 
   if (authManager.authenticated) {
-    redirect(307, continueUrl);
+    redirect(307, Route.continue(continueUrl, Route.photos()));
   }
 
   if (!serverConfigManager.value.isInitialized) {