diff --git a/app/routes/index.js b/app/routes/index.js index a9e55426bf..c97f9496fb 100644 --- a/app/routes/index.js +++ b/app/routes/index.js @@ -59,15 +59,7 @@ const index = (app, db) => { app.post("/benefits", isLoggedIn, isAdmin, benefitsHandler.updateBenefits); */ - // Allocations Page - app.get("/allocations/:userId", isLoggedIn, allocationsHandler.displayAllocations); - - // Memos Page - app.get("/memos", isLoggedIn, memosHandler.displayMemos); - app.post("/memos", isLoggedIn, memosHandler.addMemos); - - // Handle redirect for learning resources link - app.get("/learn", isLoggedIn, (req, res) => { + // Insecure way to handle redirects by taking redirect url from query string return res.redirect(req.query.url); });