@@ -558,7 +558,7 @@ func validOptionalPort(port string) bool {
558558// IsValidRedirect checks whether the redirect URL is whitelisted
559559func (p *OAuthProxy) IsValidRedirect(redirect string) bool {
560560 switch {
561− case strings.HasPrefix(redirect, "/") && !strings.HasPrefix(redirect, "//"):
561+ case strings.HasPrefix(redirect, "/") && !strings.HasPrefix(redirect, "//") && !strings.HasPrefix(redirect, "/\\"):
562562 return true
563563 case strings.HasPrefix(redirect, "http://") || strings.HasPrefix(redirect, "https://"):
564564 redirectURL, err := url.Parse(redirect)