[bug] redirects bypass iframe mount when behind hero_router #19

New issue

Closed

opened 2026-05-04 14:00:55 +00:00 by zaelgohary · 0 comments

zaelgohary commented

2026-05-04 14:00:55 +00:00

Member

state.base_path is read once at startup from BASE_PATH env var. When the env var is unset (current deploy), every Redirect::to becomes absolute (e.g. /c/threefold) and bypasses the iframe mount prefix, returning 503 from hero_router.

Found via Playwright network audit.

`state.base_path` is read once at startup from `BASE_PATH` env var. When the env var is unset (current deploy), every `Redirect::to` becomes absolute (e.g. `/c/threefold`) and bypasses the iframe mount prefix, returning 503 from hero_router. Found via Playwright network audit.