Index: app/lib/actions.ts
===================================================================
--- app/lib/actions.ts	(revision 9cae1de7ef0657285866cbba6d2bb5c7c7323d05)
+++ app/lib/actions.ts	(revision f9fef87a76f01fb07b3b5325a7acb17479063565)
@@ -18,5 +18,7 @@
     try {
         const redirectTo =
-            (formData.get('redirectTo') as string) || '/home';
+            (formData.get('redirectTo') as string)?.startsWith('/')
+                ? (formData.get('redirectTo') as string)
+                : '/home';
 
         await signIn('credentials', {