fixed security issue with redirect after expired login, thanks André Kablu

2014-01-24 16:22:42 -06:00
parent 13cc8df4be
commit 060eddf812
3 changed files with 3 additions and 3 deletions
@@ -1125,7 +1125,7 @@ class Auth(object):
                   f=f, args=args, vars=vars, scheme=scheme)

    def here(self):
-        return URL(args=current.request.args,vars=current.request.vars)
+        return URL(args=current.request.args,vars=current.request.get_vars)

    def __init__(self, environment=None, db=None, mailer=True,
                 hmac_key=None, controller='default', function='user',