URL跳转漏洞。

@@ -286,8 +286,8 @@ let success = (req, res) => {
         defaultHeader: false,
         title: '注册成功',
         passport: {
-            goUrl: goUrl,
-            goShopping: goShoppingUrl,
+            goUrl: safeRedirect(goUrl),
+            goShopping: safeRedirect(goShoppingUrl),
             mobile: mobile
         }
     });
@@ -303,4 +303,4 @@ module.exports = {
     sendBindMsg,
     msgCaptcha,
     mobileRegister
-};
\ No newline at end of file
+};